AutoGineer
Generated banner for Owasp Agentic
Generated logo for Owasp Agentic

Owasp Agentic

MicrosoftOfficialPublished by Microsoft

  • Skill
  • Guidelines
  • Security
  • CC-BY-SA-4.0
  • No issues found
Download ZIP

From the author

OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
— the description by Microsoft

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

The owasp-agentic skill provides a machine-readable implementation of the OWASP Top 10 for Agentic Applications (2026). It serves as a comprehensive reference for developers and security professionals to understand, detect, and mitigate critical vulnerabilities inherent in autonomous AI agent systems. The skill is organized into a vulnerability index and individual reference documents for each of the ten identified risk categories, offering actionable guidance on prevention, detection, and remediation.

What it does

  • Provides structured, machine-readable definitions for the OWASP Agentic Top 10 security risks.
  • Offers vulnerability checklists to help identify potential security gaps in agentic workflows.
  • Includes prevention controls and remediation strategies for each identified vulnerability.
  • Details attack scenarios to illustrate how agentic systems can be exploited.
  • Facilitates integration into security auditing and threat modeling processes for AI agents.

When to use it

  • During the design and architecture phase of building an AI agent system.
  • When performing security audits or threat modeling on existing agentic applications.
  • When developing guardrails or safety protocols for autonomous AI agents.
  • When training development teams on secure AI agent implementation practices.

Advantages

  • Standardized security framework based on industry-recognized OWASP research.
  • Machine-readable format allows for automated integration into agent development pipelines.
  • Provides concrete, actionable remediation steps rather than just theoretical risks.
  • Covers a wide range of agent-specific threats like goal hijacking and rogue agents.

Usage examples

“What are the primary risks associated with Agent Goal Hijack according to the OWASP Agentic Top 10?”
The agent retrieves the ASI01:2026 reference, explaining that goal hijack involves attackers manipulating an agent's objectives or decision pathways, and lists associated risks like unauthorized data exfiltration and financial fraud.
“Provide a checklist to assess if my agent is vulnerable to Tool Misuse and Exploitation.”
The agent references ASI02:2026 to provide a list of conditions and patterns that indicate potential tool misuse, along with recommended prevention controls like enforcing least privilege.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/microsoft/owasp-agentic/download

  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip owasp-agentic.zip -d .agents/skills

Documentation by Microsoft

OWASP® Agentic Top 10 — Skill Entry

This SKILL.md is the entrypoint for the OWASP Agentic Top 10 skill.

The skill encodes the OWASP Top 10 for Agentic Applications (2026) as structured, machine-readable references that an agent can query to identify, assess, and remediate security risks in AI agent systems.

Normative references (Agentic Top 10)

  1. 00 Vulnerability Index

  2. 01 Agent Goal Hijack

  3. 02 Tool Misuse and Exploitation

  4. 03 Identity and Privilege Abuse

  5. 04 Agentic Supply Chain Vulnerabilities

  6. 05 Unexpected Code Execution

  7. 06 Memory and Context Poisoning

  8. 07 Insecure Inter-Agent Communication

  9. 08 Cascading Failures

  10. 09 Human-Agent Trust Exploitation

  11. 10 Rogue Agents

Skill layout

  • SKILL.md — this file (skill entrypoint).

  • references/ — the Agentic Top 10 normative documents.

    • 00-vulnerability-index.md — index of all vulnerability identifiers, categories, and cross-references.

    • 01 through 10 — one document per vulnerability aligned with OWASP Agentic Security numbering.

Third-Party Attribution

Copyright © OWASP Foundation. OWASP® Top 10 for Agentic Applications (2026) content is derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). Source: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/ Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.

Files

Requirements and compatibility

Written for: GitHub Copilot, Claude Code

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Claude Code frontmatter

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Microsoft
Publisher
Microsoft (Official)
Source
microsoft/hve-core · .github/skills/security/owasp-agentic · commit f425e94
Licence
Creative Commons Attribution-ShareAlike 4.0 International (redistribution allowed)
  • LICENSE (written by AutoGineer)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Microsoft or Microsoft.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download owasp-agentic.zip