Map document sections to compliance framework controls with confidence scoring. Produces bidirectional mappings for gap analysis.
安全
Cyber OWASP Review
试用Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level...
它能做什么
Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level...
技能文档
Cyber OWASP Review
Overview
Normalize application security findings into OWASP categories and produce remediation actions.
Workflow
- Ingest raw findings from scanners, tests, or reviews.
- Map findings to OWASP categories using keyword and context matching.
- Aggregate findings by category and severity.
- Produce category-specific remediation checklist output.
Use Bundled Resources
- Run
scripts/map_findings_to_owasp.pyfor deterministic mapping. - Read
references/owasp-mapping-guide.mdfor category heuristics.
Guardrails
- Keep guidance remediation-focused.
- Do not provide exploit payloads or offensive attack playbooks.
相关技能
Evaluate individual framework controls against organizational documentation with evidence extraction, severity classification, and remediation recommendations.
面向 OpenClaw 的权限治理工作流,覆盖最小权限执行、审批前置与 ISO 27001 / NIST 合规检查。
Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation...
Manage and enforce least-privilege execution, approval-based elevation, port and egress monitoring, and ISO 27001/NIST compliance reporting for OpenClaw secu...
Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before runnin...