# Owasp Asi

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

- Repository: https://github.com/Tencent/AI-Infra-Guard (7284 stars)
- Category: Security
- License: Apache-2.0
- Last updated: 2026-10-30
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add Tencent/AI-Infra-Guard --skill owasp-asi -g -a claude-code -y`
Codex: `npx skills add Tencent/AI-Infra-Guard --skill owasp-asi -g -a codex -y`
Cursor: `npx skills add Tencent/AI-Infra-Guard --skill owasp-asi -g -a cursor -y`
Gemini CLI: `npx skills add Tencent/AI-Infra-Guard --skill owasp-asi -g -a gemini-cli -y`

## Description

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# OWASP ASI Classification Framework

**OWASP Top 10 for Agentic Applications 2026** - Standardized risk classification for AI agent security.

## Risk Categories

| ID | Risk Type | Key Indicators |
|:---|:----------|:---------------|
| **ASI01** | Agent Goal Hijack | Prompt injection, instruction override, goal manipulation |
| **ASI02** | Tool Misuse & Exploitation | Unauthorized tool calls, parameter tampering, unvalidated inputs |
| **ASI03** | Identity & Privilege Abuse | Auth bypass, permission escalation, missing authorization |
| **ASI04** | Agentic Supply Chain | Malicious dependencies, compromised tools, package poisoning |
| **ASI05** | Unexpected Code Execution | RCE, command injection, code evaluation |
| **ASI06** | Memory & Context Poisoning | Data leakage, context manipulation, memory corruption |
| **ASI07** | Insecure Inter-Agent Comm | Unencrypted channels, data exposure between agents |
| **ASI08** | Cascading Failures | Error propagation, chain reaction vulnerabilities |
| **ASI09** | Human-Agent Trust Exploit | Social engineering, deceptive responses |
| **ASI10** | Rogue Agents | Malicious agent behavior, unauthorized actions |

## Detection Source → ASI Mapping

The rest: https://github.com/Tencent/AI-Infra-Guard/blob/HEAD/agent-scan/agent_scan/prompt/skills/owasp-asi/SKILL.md