infrastructure-vulnerabilities
OWASP Infrastructure Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in internal IT infrastructure environments.
Informations de source
- Dépôt
- willvelida/biotrackr
- Dernière activité de la source
- 11 avril 2026 à 08:12
- Langue détectée de SKILL.md
- anglais
- Étoiles
- 6
- Forks
- 3
Options d'installation
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Vérifiez les fichiers source
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Explorateur de fichiers
15 fichiersAffichage de SKILL.md
SKILL.md
Instructions source · Aperçu en lecture seule- name
- infrastructure-vulnerabilities
- description
- OWASP Infrastructure Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in internal IT infrastructure environments.
- license
- MIT
- metadata
- {"authors":"OWASP Infrastructure Security Project","spec_version":"1.0","framework_revision":"1.0.0","last_updated":"2026-02-13","skill_based_on":"https://github.com/chris-buckley/agnostic-prompt-standard","content_based_on":"https://owasp.org/www-project-top-10-infrastructure-security-risks/"}
# Infrastructure Vulnerabilities — Skill Entry
This `SKILL.md` is the **entrypoint** for the Infrastructure Vulnerabilities skill.
The skill encodes the **OWASP Infrastructure Security Top 10 (2024)** as structured,
machine-readable references that an agent can query to identify, assess, and remediate
infrastructure security risks.
## Normative references (Infrastructure Top 10)
1. [00 Vulnerability Index](references/00-vulnerability-index.md)
2. [01 Outdated Software](references/01-outdated-software.md)
3. [02 Insufficient Threat Detection](references/02-insufficient-threat-detection.md)
4. [03 Insecure Configurations](references/03-insecure-configurations.md)
5. [04 Insecure Resource and User Management](references/04-insecure-resource-user-management.md)
6. [05 Insecure Use of Cryptography](references/05-insecure-use-of-cryptography.md)
7. [06 Insecure Network Access Management](references/06-insecure-network-access-management.md)
8. [07 Insecure Authentication Methods and Default Credentials](references/07-insecure-authentication-default-credentials.md)
9. [08 Information Leakage](references/08-information-leakage.md)
10. [09 Insecure Access to Resources and Management Components](references/09-insecure-access-resources-management-components.md)
11. [10 Insufficient Asset Management and Documentation](references/10-insufficient-asset-management-documentation.md)
## Skill layout
- `SKILL.md` — this file (skill entrypoint).
- `references/` — the Infrastructure Top 10 normative documents.
- `00-vulnerability-index.md` — master index of all vulnerability identifiers, categories, and cross-references.
- `01` through `10` — one document per vulnerability aligned with OWASP Infrastructure Security numbering.
- `assets/` — reusable format and constants blocks.
- `constants/` — vulnerability catalog and category definitions.
- `constants-infrastructure-catalog-v1.0.0.md`
- `formats/` — output contract examples.
- `format-vulnerability-assessment-v1.0.0.md`
- `format-remediation-checklist-v1.0.0.md`
Voir sur GitHub