Skip to content
store
owasp-top-10-testing

Self-hosted alternatives to owasp-top-10-testing

5 self-hosted AI Skills apps to use instead, best rated first.

Top picks

  1. C

    claude-to-deerflow

    Launch

    claude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code

    Self-hosted

  2. O

    open-notebook

    Launch

    open-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O

    Self-hosted

  3. R

    Reactive Resume

    Launch

    Reactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish

    Open sourceSelf-hosted

  4. S

    self-hosted-funnel-launch

    Launch

    Self-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a

    Self-hosted

  5. G

    get-convex/convex-backend

    Launch

    Convex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca

    Self-hosted

About owasp-top-10-testing

O

owasp-top-10-testing

Test an application against the OWASP Top 10 with Strix

owasp-top-10-testing is a Strix skill for testing an application against the OWASP Top 10. The OWASP Top 10 is a list of risk categories rather than a test suite, so the skill runs the agents against each category on the real application and reports what can actually be exploited. It is explicit that claiming a clean sweep of all ten categories would be misleading, and it tells the user what can and cannot be tested by an agent. The skill uses the current edition, OWASP Top 10:2025, and asks before it targets an older edition, since some compliance checklists still reference 2021 and a report with the wrong edition label is misleading. It lists the main differences from 2021: SSRF is folded into A01, the old outdated-components category has become software supply chain failures at A03, a new category for mishandling exceptional conditions is at A10, and security misconfiguration has moved up to A02. Strix's agents do the exploitation, and the skill covers running the scan category by category and reporting coverage honestly. For installation and the managed cloud route, it points to the penetration-testing-with-strix skill. It is for security teams and developers who need a category-by-category result for a report. It passes Gen Agent Trust Hub and Snyk on skills.sh, and Socket shows a warning. It has about 10,200 installs. Install it with npx skills add https://github.com/usestrix/strix --skill owasp-top-10-testing.

View owasp-top-10-testingAll AI Skills apps
Price
Free
Made by
usestrix
Category
AI Skills
Website
github.com/usestrix/strix/owasp-top-10-testing