360 Secure SkillHub
360 安全技能中心

Cyber OWASP Review

读取扫描器、测试或评审产生的原始应用安全发现,按关键词与上下文匹配归入 OWASP 类别,按类别和严重度聚合,并生成以修复为导向的分类检查清单;附带确定性映射脚本与类别判定指南,明确不提供漏洞利用载荷或攻击手册。

0x-professor
0x-professor
热度 88.20
最近更新 2026-05-17 12:51:24
分类:安全依赖:代码执行 / 读写文件应用场景:报告撰写 / 数据处理 / 模板 / 代码审查

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add cyber-owasp-review
Metadata
name
cyber-owasp-review
description
Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.

Cyber OWASP Review

Overview

Normalize application security findings into OWASP categories and produce remediation actions.

Workflow

  1. Ingest raw findings from scanners, tests, or reviews.
  2. Map findings to OWASP categories using keyword and context matching.
  3. Aggregate findings by category and severity.
  4. Produce category-specific remediation checklist output.

Use Bundled Resources

  • Run scripts/map_findings_to_owasp.py for deterministic mapping.
  • Read references/owasp-mapping-guide.md for category heuristics.

Guardrails

  • Keep guidance remediation-focused.
  • Do not provide exploit payloads or offensive attack playbooks.