# Web Application Security

> **Source**: `sources/github/anthropic-cybersecurity-skills/`
> **License**: Apache 2.0
> **Use when**: Web security review, OWASP assessment, XSS/SQLi testing, API security

## Overview
Guides the agent through web application security assessment following OWASP standards. References specific cybersecurity skills for web attack detection and prevention.

## Relevant Skills
Load these from `sources/github/anthropic-cybersecurity-skills/skills/`:
- `detecting-ai-model-prompt-injection-attacks/SKILL.md` - Prompt injection
- Search `index.json` for: web, xss, sql-injection, owasp, api-security, waf

## OWASP Top 10 Checklist
1. Broken Access Control
2. Cryptographic Failures
3. Injection (SQLi, XSS, Command Injection)
4. Insecure Design
5. Security Misconfiguration
6. Vulnerable and Outdated Components
7. Identification and Authentication Failures
8. Software and Data Integrity Failures
9. Security Logging and Monitoring Failures
10. Server-Side Request Forgery (SSRF)
