OWASP ASVS Security Review
When and how to apply the OWASP ASVS v5.0 verification standard, with Drupal 11 mappings, during security reviews.
This is a real, installable Claude Code skill
(
security-tools:owasp-asvs).
View source on GitHub →What this skill does
Applies the OWASP Application Security Verification Standard (ASVS) v5.0 as a checklist, with each verification requirement mapped to a concrete Drupal 11 API, module, or configuration setting — so a review produces actionable findings instead of generic advice.
When to use it
- Performing a security code review on a Drupal 11 codebase
- Implementing a specific ASVS requirement (access control, input validation, session management, etc.)
- Verifying security compliance before a release or audit
Source
This is a real, installable Claude Code skill. The maintained version — the full ASVS-to-Drupal mapping — lives in the security-tools plugin of the siva01c/claude-plugins marketplace repository. This page is a summary; the linked SKILL.md is the source of truth.