
OWASP Top 10, CWE Top 25 2025, ASVS v4.0, 80+ checks
8 skills · 1 MCP · curated by skillsaggregator team · updated 2026-10-30
Security reviews move fast when you have the right tools. This pack covers the attack surface from multiple angles: PHP/OWASP vulnerability scanning, multi-agent cyber threat analysis, Semgrep static analysis rules, and general static analysis workflows. Use it for pre-launch audits, penetration testing support, or ongoing secure code review.

OWASP Top 10, CWE Top 25 2025, ASVS v4.0, 80+ checks

OWASP Top 10:2025, ASVS 5.0, Agentic AI security

Autonomous vulnerability discovery and remediation: threat-model, vuln-scan, triage, and patch skills with a sandboxed scanning pipeline
Static analysis: injection, secrets, insecure patterns

CodeQL, Semgrep, SARIF parsing toolkit

Architectural context for security audits

Security testing handbook as skills

Built-in /security-review for pending changes
by Semgrep · Security
Run Semgrep SAST scans, query findings, and manage rulesets and policies.