ml-vulnerabilities

name	ml-vulnerabilities
description	OWASP Machine Learning Top 10 (2023) vulnerability knowledge base for identifying, assessing, and remediating security risks in machine learning systems.
license	CC-BY-SA-4.0
metadata	{"authors":"OWASP Machine Learning Security Project","spec_version":"1.0","framework_revision":"1.0.0","last_updated":"2026-02-16","skill_based_on":"https://github.com/chris-buckley/agnostic-prompt-standard","content_based_on":"https://owasp.org/www-project-machine-learning-security-top-10/"}

ML Vulnerabilities — Skill Entry

This SKILL.md is the entrypoint for the ML Vulnerabilities skill.

The skill encodes the OWASP Machine Learning Security Top 10 as structured, machine-readable references that an agent can query to identify, assess, and remediate machine learning security risks.

Normative references (ML Top 10)

1. 00 Vulnerability Index
2. 01 Input Manipulation Attack
3. 02 Data Poisoning Attack
4. 03 Model Inversion Attack
5. 04 Membership Inference Attack
6. 05 Model Theft
7. 06 AI Supply Chain Attacks
8. 07 Transfer Learning Attack
9. 08 Model Skewing
10. 09 Output Integrity Attack
11. 10 Model Poisoning

Skill layout

• SKILL.md — this file (skill entrypoint).
• references/ — the ML Top 10 normative documents.
  • 00-vulnerability-index.md — master index of all vulnerability identifiers, categories, and cross-references.
  • 01 through 10 — one document per vulnerability aligned with OWASP ML Security Top 10 numbering.
• assets/ — reusable format and constants blocks.
  • constants/ — vulnerability catalog and category definitions.
    • constants-ml-catalog-v1.0.0.md
  • formats/ — output contract examples.
    • format-vulnerability-assessment-v1.0.0.md
    • format-remediation-checklist-v1.0.0.md

Third-Party Attribution

Copyright © OWASP Foundation. OWASP® Machine Learning Security Top 10 (2023) content is derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). Source: https://owasp.org/www-project-machine-learning-security-top-10/ Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.