security-audit

仓库创建 2026年1月30日最近提交 5 个月前SkillHot 收录 20 天前

▸ 精选理由

覆盖高危漏洞与常见安全失误，适合发布前审查。

这个 Skill 做什么

基于 OWASP 的 Java 应用安全检查清单与常见漏洞防护建议。

帮你把 Java 应用的安全隐患一条条列出来，按照 OWASP Top 10、输入验证和注入防护等要点给出检查项和修复建议。适合代码安全审查、发版前核查或有人问到漏洞时拿来对照。特别之处是覆盖 Spring、Quarkus、Jakarta EE 和纯 Java 的常见陷阱，并给出可落地的修复思路和优先级。

▸ 展开 SKILL.md 英文原文

Java security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with Spring, Quarkus, Jakarta EE, and plain Java. Use when reviewing code security, before releases, or when user asks about vulnerabilities.

开发编程安全审计OWASP注入防护通用

693

Stars

134

Forks

仓库内 Skill

+21

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/decebals/claude-code-java/main/.claude/skills/security-audit/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/decebals/claude-code-java/main/.claude/skills/security-audit/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Security Audit Skill

Security checklist for Java applications based on OWASP Top 10 and secure coding practices.

## When to Use
- Security code review
- Before production releases
- User asks about "security", "vulnerability", "OWASP"
- Reviewing authentication/authorization code
- Checking for injection vulnerabilities

---

## OWASP Top 10 Quick Reference

| # | Risk | Java Mitigation |
|---|------|-----------------|
| A01 | Broken Access Control | Role-based checks, deny by default |
| A02 | Cryptographic Failures | Use strong algorithms, no hardcoded secrets |
| A03 | Injection | Parameterized queries, input validation |
| A04 | Insecure Design | Threat modeling, secure defaults |
|

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有