Asvs5 Audit — Security skill for Claude Code
Run an OWASP ASVS 5.0.0 security verification audit against this codebase.
How to install Asvs5 Audit
Installs to ~/.claude/commands/ucll-re-development-claude-skills-asvs5-audit.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/UCLL-RE-Development/claude-skills/HEAD/.claude/commands/asvs5-audit.md -o ~/.claude/commands/ucll-re-development-claude-skills-asvs5-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What Asvs5 Audit does
Run an OWASP ASVS 5.0.0 security verification audit against this codebase.
Load the `asvs5-audit` skill and follow its procedure exactly. Everything needed is in that skill — the 345-requirement catalog, the per-tier check recipes, the report skeletons and the scoring rules. Do not fetch ASVS from the web.
**Assume nothing about this project.** Detect the stack, framework, frontend, authentication architecture, datastore, edge and deployment model from evidence, per the skill's `references/sta
Alternatives in Security
- Clawsec — Security skill suite with drift detection, automated audits, and skill integrity verification 798 ★
- Audit Infra — Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE 98 ★
- Security Audit Stride — Chạy checklist bảo mật OWASP Top 10 + STRIDE trước bước review cuối của Tech Lead trong WF-REVIEW-CRIT (luôn c 90 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Claude Code Audit Gate
Independent audit agent for Claude Code: audits an app built by another agent (OWASP ASVS/Top 10 security, eve
Owasp Security
OWASP Top 10:2025, ASVS 5.0, and Agentic AI security (2026) with code review checklists, secure patterns, and
Re Security
Avalia a postura de segurança do alvo e gera o security-posture-report.md mapeado para OWASP e ASVS
Outskill Owasp Security Review
A Claude Code skill: launch-gate security review against the OWASP Top 10 (2025) for Next.js + Supabase + Open
LLM Pentest Juice Shop
Demonstration of LLM coding agents performing automated black-box pentesting and white-box code review against
Closeout
Post-project audit. Diffs SCOPE.md deliverables against ground truth using tier-aware verification (code-done
Related Agents
Appsec Engineer
Application Security Engineer (Tier 3): reviews and tests code against OWASP Top 10:2025 / ASVS — authenticati
Security Lens
Application security lens for DevBox reviews. Threat-models a plan or diff across its trust boundaries (STRIDE
Appsec Compliance Checker
Use proactively to map security findings from a threat model or code review to specific controls in OWASP ASVS