What problem does it solve? Web applications often ship with undetected vulnerabilities like SQL injection, XSS, and broken authentication. This Skill automates a structured OWASP Top 10 security audit so teams can find and remediate weaknesses before release or compliance review. ## Core Features & Use Cases - Automated Vulnerability Scanning: Runs OWASP ZAP active scans and Nuclei templates covering injection, XSS, misconfiguration, and authentication flaws. - Manual Testing Support: Generates test cases, payloads, and reproduction steps for penetration testers to verify findings. - Categorized Reporting: Maps findings to OWASP Top 10 categories with CVSS scores, severity ratings, and remediation guidance in executive and technical reports. - Use Case: Before a major release, point the Skill at your staging environment to detect a SQL injection in the search endpoint, weak password policies, and security misconfigurations, then receive a remediation plan. ## Quick Start Scan my staging application at https://staging.example.com for OWASP Top 10 vulnerabilities and generate a report with remediation guidance.
