web-security
OWASP Top 10, security headers, CSP, XSS prevention, and vulnerability prevention.
npx skills add a5c-ai/babysitter --skill web-security --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Web Security Skill Expert assistance for web application security. ## Capabilities - Implement security headers - Configure CSP - Prevent XSS/CSRF - Secure authentication - Handle sensitive data ## Security Headers ```typescript // Next.js const securityHeaders = [ { key: 'X-DNS-Prefetch-Control', value: 'on' }, { key: 'Strict-Transport-Security', value: 'max-age=63072000; includeSubDomains' }, { key: 'X-XSS-Protection', value: '1; mode=block' }, { key: 'X-Frame-Options', value: 'SAMEORIGIN' }, { key: 'X-Content-Type-Options', value: 'nosniff' }, { key: 'Referrer-Policy', value: 'origin-when-cross-origin' }, ]; ``` ## Target Processes - security-audit - security-implementation - owasp-compliance
- Capabilities
- Security Headers
- Target Processes
What does the web-security skill do?
OWASP Top 10, security headers, CSP, XSS prevention, and vulnerability prevention.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill web-security --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.