Skill

Security Audit

Scans changes for the OWASP top 10 — injection, XSS, auth flaws, secrets in code, and insecure defaults. Explains the impact and the minimal safe fix.

#security #owasp #audit #vulnerabilities

Install

skills.sh

npx skills add https://github.com/obra/superpowers --skill security-audit

GitHub repo skills.sh

Where it installs

Default config location for each supported agent.

Cursor.agents/skills
Claude Code.claude/skills
Windsurf.windsurf/skills
Cline.cline/skills
Codex.agents/skills
GitHub Copilot.github/skills

Best for

SecurityBackendFullstack

Related resources

Skill

API Design

Designs consistent REST and RPC APIs — resource naming, status codes, pagination, versioning, and error shapes. Produces an OpenAPI-friendly contract.…

#api #rest #design +1

Cursor, Claude Code, Windsurf +3

Skill

Code Review

Reviews diffs for correctness, security, and style before you open a PR. Flags risky changes, missing tests, and edge cases the author may have missed…

#review #quality #pr +1

Cursor, Claude Code, Windsurf +3