waf-setup
Deploy and tune Web Application Firewalls.
What this skill does for you
Deploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection. Use when protecting web applications from common attacks.
Quoted from the skill description in the pinned sourceWho made it
Use it with Edge
Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the waf-setup skill from bagelhole/devops-security-agent-skills.
Paste it into Claude, ChatGPT, Codex or Cursor.
Or read the skill source first.
Security evidence
| Scanner | Date | Result | Findings |
|---|---|---|---|
| Edge static checks | 2026-09-27 | Pass | 0 |
| Cisco skill-scanner | 2026-09-27 | Pass | 0 |
| Semgrep Edge rules | 2026-09-27 | Pass | 0 |
Static scans check the code, not how well the skill works.
Scanner scope, raw findings and mirrored provider records
Edge static checks (Edge-run): edge-static/1.0.1. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 0365f57a079b1332f95cf26e31dd2d5332a8399f. Raw findings: . Counted findings: .
Cisco skill-scanner (Edge-run): cisco-skill-scanner/2.1.0. Scope: Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis. Revision: 0365f57a079b1332f95cf26e31dd2d5332a8399f. Raw findings: 2. Counted findings: .
Semgrep Edge rules (Edge-run): semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1. Scope: Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded. Revision: 0365f57a079b1332f95cf26e31dd2d5332a8399f. Raw findings: . Counted findings: .
Source and licence
- Repository
- https://github.com/bagelhole/devops-security-agent-skills
- Pinned skill file
- View source at revision
- Revision
- 0365f57a079b1332f95cf26e31dd2d5332a8399f
- Package hash
- sha256:25261167200d58e381f72d525ab4e81633e0416611a44c6092f51b4a0e2089ea
- Licence
- MIT