Open source alternatives to owasp-top-10-testing
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Launchgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Launchopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Launchandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Launchmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Launchod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Launchgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
About owasp-top-10-testing
owasp-top-10-testing
Test an application against the OWASP Top 10 with Strix
owasp-top-10-testing is a Strix skill for testing an application against the OWASP Top 10. The OWASP Top 10 is a list of risk categories rather than a test suite, so the skill runs the agents against each category on the real application and reports what can actually be exploited. It is explicit that claiming a clean sweep of all ten categories would be misleading, and it tells the user what can and cannot be tested by an agent. The skill uses the current edition, OWASP Top 10:2025, and asks before it targets an older edition, since some compliance checklists still reference 2021 and a report with the wrong edition label is misleading. It lists the main differences from 2021: SSRF is folded into A01, the old outdated-components category has become software supply chain failures at A03, a new category for mishandling exceptional conditions is at A10, and security misconfiguration has moved up to A02. Strix's agents do the exploitation, and the skill covers running the scan category by category and reporting coverage honestly. For installation and the managed cloud route, it points to the penetration-testing-with-strix skill. It is for security teams and developers who need a category-by-category result for a report. It passes Gen Agent Trust Hub and Snyk on skills.sh, and Socket shows a warning. It has about 10,200 installs. Install it with npx skills add https://github.com/usestrix/strix --skill owasp-top-10-testing.
- Price
- Free
- Made by
- usestrix
- Category
- AI Skills
- Website
- github.com/usestrix/strix/owasp-top-10-testing