UCLL-RE-Development

Asvs5 Audit — Security skill for Claude Code

Security community

Run an OWASP ASVS 5.0.0 security verification audit against this codebase.

How to install Asvs5 Audit

Installs to ~/.claude/commands/ucll-re-development-claude-skills-asvs5-audit.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/UCLL-RE-Development/claude-skills/HEAD/.claude/commands/asvs5-audit.md -o ~/.claude/commands/ucll-re-development-claude-skills-asvs5-audit.md

Restart Claude Code, or start a new session, for it to be picked up.

What Asvs5 Audit does

Run an OWASP ASVS 5.0.0 security verification audit against this codebase.

Load the `asvs5-audit` skill and follow its procedure exactly. Everything needed is in that skill — the 345-requirement catalog, the per-tier check recipes, the report skeletons and the scoring rules. Do not fetch ASVS from the web.

**Assume nothing about this project.** Detect the stack, framework, frontend, authentication architecture, datastore, edge and deployment model from evidence, per the skill's `references/sta

Alternatives in Security

Deepsec — Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents 7.8k ★
Clawsec — Security skill suite with drift detection, automated audits, and skill integrity verification 798 ★
Audit Infra — Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE 98 ★