owasp-security-check 是做什么的？
基于 OWASP Top 10 和 Web 安全最佳实践的 Web 应用及 REST API 安全审计指南。用于检查代码漏洞、审查身份认证与授权、审计 API，或在生产部署前进行安全检查。
基于 OWASP Top 10 和 Web 安全最佳实践的 Web 应用及 REST API 安全审计指南。用于检查代码漏洞、审查身份认证与授权、审计 API，或在生产部署前进行安全检查。
该技能提供了一套基于 OWASP Top 10 和 Web 安全最佳实践的安全审计指南，专为 Web 应用和 REST API 设计。开发者可以在代码审查、身份验证/授权检查、API 审计或生产部署前的安全评估中使用。它覆盖了常见的安全漏洞类型及其缓解措施，适用于多种开发平台和框架。通过遵循该指南，团队能够系统性地识别和修复安全弱点，降低被攻击的风险，提高软件的整体安全性。
npx skills add https://github.com/sergiodxa/agent-skills/tree/main/skills/owasp-security-checkInstalled? Explore more 生产力与协作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →
基于 OWASP Top 10 和 Web 安全最佳实践的 Web 应用及 REST API 安全审计指南。用于检查代码漏洞、审查身份认证与授权、审计 API，或在生产部署前进行安全检查。
This repo contains 2 individual skills — each has its own dedicated page.
React performance optimization guidelines. Use when writing, reviewing, or refactoring React components to ensure optimal rendering and bundle patterns. Triggers on tasks involving React components, hooks, memoization, or bundle optimization.
Testing best practices for the frontend. Emphasizes E2E tests over unit tests, minimal mocking, and testing behavior over implementation details. Use when writing tests or reviewing test code.
Gemini CLI one-shot prompts, summaries, generation, skills, hooks, MCP, or Gemma routing.
Fetch GitHub issues, select candidates, spawn background fix agents, open PRs, and optionally process PR review comments.
Create, edit, audit, tidy, validate, or restructure AgentSkills and SKILL.md files.
Search, install, update, sync, or publish agent skills with the ClawHub CLI and registry.
Delegate coding work to Codex, Claude Code, or OpenCode as background workers; not simple edits or read-only code lookup.
List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio.