Owasp Asi
OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.
Install
npx skills add Tencent/AI-Infra-Guard --skill owasp-asi -g -a claude-code -y- Repository
- Tencent/AI-Infra-Guard7.3k
- Category
- Security
- Updated
- 6d ago
- License
- Apache-2.0
- Context cost
- Lightabout 852 tokens
- Runs scripts
- No, instructions only
What it does
OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.
OWASP ASI Classification Framework
OWASP Top 10 for Agentic Applications 2026 - Standardized risk classification for AI agent security.
Risk Categories
| ID | Risk Type | Key Indicators |
|---|---|---|
| ASI01 | Agent Goal Hijack | Prompt injection, instruction override, goal manipulation |
| ASI02 | Tool Misuse & Exploitation | Unauthorized tool calls, parameter tampering, unvalidated inputs |
| ASI03 | Identity & Privilege Abuse | Auth bypass, permission escalation, missing authorization |
| ASI04 | Agentic Supply Chain | Malicious dependencies, compromised tools, package poisoning |
| ASI05 | Unexpected Code Execution | RCE, command injection, code evaluation |
| ASI06 | Memory & Context Poisoning | Data leakage, context manipulation, memory corruption |
| ASI07 | Insecure Inter-Agent Comm | Unencrypted channels, data exposure between agents |
| ASI08 | Cascading Failures | Error propagation, chain reaction vulnerabilities |
| ASI09 | Human-Agent Trust Exploit | Social engineering, deceptive responses |
| ASI10 | Rogue Agents | Malicious agent behavior, unauthorized actions |
