| name | agentic-vulnerabilities |
| description | OWASP Top 10 for Agentic Applications (2026) vulnerability knowledge base for identifying, assessing, and remediating security risks in AI agent systems. |
| license | CC-BY-SA-4.0 |
| metadata | {"authors":"OWASP Agentic Security Initiative","spec_version":"1.0","framework_revision":"1.0.0","last_updated":"2026-02-13","skill_based_on":"https://github.com/chris-buckley/agnostic-prompt-standard","content_based_on":"https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/"} |
Agentic Vulnerabilities — Skill Entry
This SKILL.md is the entrypoint for the Agentic Vulnerabilities skill.
The skill encodes the OWASP Top 10 for Agentic Applications (2026) as structured,
machine-readable references that an agent can query to identify, assess, and remediate
security risks in AI agent systems.
Normative references (Agentic Top 10)
- 00 Vulnerability Index
- 01 Agent Goal Hijack
- 02 Tool Misuse and Exploitation
- 03 Identity and Privilege Abuse
- 04 Agentic Supply Chain Vulnerabilities
- 05 Unexpected Code Execution
- 06 Memory and Context Poisoning
- 07 Insecure Inter-Agent Communication
- 08 Cascading Failures
- 09 Human-Agent Trust Exploitation
- 10 Rogue Agents
Skill layout
SKILL.md — this file (skill entrypoint).
references/ — the Agentic Top 10 normative documents.
00-vulnerability-index.md — master index of all vulnerability identifiers, categories, and cross-references.
01 through 10 — one document per vulnerability aligned with OWASP Agentic Security numbering.
assets/ — reusable format and constants blocks.
constants/ — vulnerability catalog and category definitions.
constants-agentic-catalog-v1.0.0.md
formats/ — output contract examples.
format-vulnerability-assessment-v1.0.0.md
format-remediation-checklist-v1.0.0.md
Third-Party Attribution
Copyright © OWASP Foundation.
OWASP® Top 10 for Agentic Applications (2026) content is derived from works by the
OWASP Foundation, licensed under CC BY-SA 4.0
(https://creativecommons.org/licenses/by-sa/4.0/).
Source: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/
Modifications: Vulnerability descriptions restructured into agent-consumable reference
documents with added detection and remediation guidance.
OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.