{
  "id": "skill-area:web-security",
  "_kind": "SkillArea",
  "_file": "domain/skill-areas/skill-areas-frontend.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Web Application Security",
    "description": "Web app security: XSS, CSRF, CORS, CSP, secure cookies, click-\njacking, and input validation. Threat-model alignment with\nOWASP Top 10.\n",
    "domains": [
      "specialization:web-development",
      "specialization:security-research"
    ],
    "expertiseLevels": [
      "intermediate",
      "expert"
    ]
  },
  "outgoingEdges": [
    {
      "from": "skill-area:web-security",
      "to": "specialization:web-development",
      "kind": "applies_to",
      "attributes": {
        "confidence": "primary"
      }
    },
    {
      "from": "skill-area:web-security",
      "to": "specialization:security-research",
      "kind": "applies_to",
      "attributes": {
        "confidence": "secondary"
      }
    },
    {
      "from": "skill-area:web-security",
      "to": "skill-area:web-security-testing",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:web-security",
      "to": "skill-area:document-processing",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    }
  ],
  "incomingEdges": [
    {
      "from": "skill-area:WAF-configuration",
      "to": "skill-area:web-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "helpful"
      }
    },
    {
      "from": "stack-profile:blockchain-dapp",
      "to": "skill-area:web-security",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:browser-extension",
      "to": "skill-area:web-security",
      "kind": "requires_skill_area"
    },
    {
      "from": "skill:security-review",
      "to": "skill-area:web-security",
      "kind": "addresses",
      "attributes": {}
    },
    {
      "from": "lib-agent:ai-agents-conversational--csp-security-auditor",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-agent:security-research--web-security-researcher",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-agent:web-development--security-auditor",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-agent:web-development--security-hardening",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:web-development--content-security-policy",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:web-development--owasp-security-audit",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-skill:ai-agents-conversational--mcp-csp-investigation",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-skill:security-compliance--owasp-security-scanner",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-skill:security-research--burp-websec",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-skill:web-development--csp",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-skill:web-development--web-security",
      "to": "skill-area:web-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "role:fullstack-engineer",
      "to": "skill-area:web-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:security-reviewer",
      "to": "skill-area:web-security",
      "kind": "requires_expertise",
      "attributes": {}
    }
  ]
}