common-owasp Eval report.

Task fit is weak; compare alternatives before selecting.

• Evaluate common-owasp before installing it in an agent workflow
• security
• Coding agents workflows; Claude Code teams; teams that value GitHub adoption signals

Install handoff is available.

• npx skills add HoangNguyen0403/agent-skills-standard --skill common-owasp

standard package or runtime install path

• npx skills add HoangNguyen0403/agent-skills-standard --skill common-owasp

Good trust signals with a few areas worth checking before rollout.

• Strong shortlist
• 561 GitHub stars
• MIT

Needs review

• Permission surface may require sandboxing

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

• Test manually in an isolated workspace and compare against safer alternatives.
• High-risk permission hints: Secrets or environment access

MIT

• MIT

secrets or environment access, network or browser access

• Network access: medium
• Filesystem access: medium
• Secrets or environment access: high