원클릭으로 Manus에서 모든 스킬 실행

agentic-ai-risk-assess

스타2

포크0

업데이트2026년 5월 19일 08:03

Assess agentic AI applications against the OWASP Top 10 for Agentic Applications 2026. Use when reviewing autonomous AI agents, multi-agent systems, or agentic workflows for security risks including goal hijacking, tool misuse, privilege abuse, and rogue agent behavior.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

larsderidder

larsderidder/theredbeard-pi-agent

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Agentic AI Risk Assessment

Evaluate agentic AI applications against all 10 risk categories by following the full procedure in plays/agentic-ai-risk-assess.md.

Steps

Architecture Mapping — Identify agent type (single/multi-agent), autonomy level, tool ecosystem, memory systems, inter-agent communication protocols, and human oversight mechanisms.
Assess Each Agentic Top 10 Risk:
- ASI01 Agent Goal Hijack — Hidden prompts, instruction override, silent exfiltration via copilot patterns
- ASI02 Tool Misuse — Legitimate tools bent into destructive outputs, tool parameter manipulation
- ASI03 Identity & Privilege Abuse — Leaked credentials, excessive permissions, agent operating beyond scope
- ASI04 Agentic Supply Chain — Poisoned MCP/A2A components, runtime component tampering, dynamic ecosystem risks
- ASI05 Unexpected Code Execution — Natural language execution paths leading to RCE, code generation vulnerabilities
- ASI06 Memory & Context Poisoning — Long-term behavior manipulation via memory attacks, context window exploits
- ASI07 Insecure Inter-Agent Communication — Spoofed messages, man-in-the-middle between agents, cluster misdirection
- ASI08 Cascading Failures — False signals propagating through automated pipelines, escalating impact chains
- ASI09 Human-Agent Trust Exploitation — Confident misleading explanations, social engineering of human operators
- ASI10 Rogue Agents — Misalignment, concealment, self-directed action, emergent harmful behavior
Synthesize Findings — Assign severity based on exploitability and deployment context. Provide code locations, configuration gaps, and concrete remediation.

Output

Architecture overview, risk matrix (all 10 categories with status), detailed findings using templates/finding.md, positive controls observed, and prioritized recommendations.

OWASP References

OWASP Top 10 for Agentic Applications 2026
OWASP GenAI Security Project
OWASP Agentic Security Initiative

이 저장소의 다른 Skills

같은 저장소

impeccable

larsderidder/theredbeard-pi-agent

Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states. Handles UX review, visual hierarchy, information architecture, cognitive load, accessibility, performance, responsive behavior, theming, anti-patterns, typography, fonts, spacing, layout, alignment, color, motion, micro-interactions, UX copy, error states, edge cases, i18n, and reusable design systems or tokens. Also use for bland designs that need to become bolder or more delightful, loud designs that should become quieter, live browser iteration on UI elements, or ambitious visual effects that should feel technically extraordinary. Not for backend-only or non-UI tasks.

2026-07-092

agent-security-audit

larsderidder/theredbeard-pi-agent

Audit AI agent configurations for security risks — excessive permissions, prompt injection surfaces, data exfiltration paths, and missing guardrails. Use when reviewing CLAUDE.md files, MCP configs, agent orchestration code, or any AI agent setup.

2026-05-192

api-security-review

larsderidder/theredbeard-pi-agent

Comprehensive API security review against OWASP API Security Top 10 (2023). Use when reviewing OpenAPI/Swagger specs, auditing REST/GraphQL/gRPC implementations, testing authentication mechanisms, or checking API gateway configurations. Covers BOLA/IDOR, broken auth, mass assignment, rate limiting, SSRF, and more with real-world attack scenarios.

2026-05-192

code-review-security

larsderidder/theredbeard-pi-agent

Security-focused code review mapped to OWASP Top 10 and ASVS. Use when reviewing pull requests, auditing files or modules for vulnerabilities, or performing pre-merge security gate checks. Covers injection, auth, authorization, cryptography, data exposure, misconfiguration, and deserialization.

2026-05-192

iac-security-review

larsderidder/theredbeard-pi-agent

Security review of Infrastructure-as-Code (Terraform, Kubernetes, CloudFormation). Use when reviewing IaC files for misconfigurations, overpermissioning, exposed resources, missing encryption, secrets in code, and supply chain risks. Covers CIS benchmarks and cloud security best practices.

2026-05-192

llm-risk-assess

larsderidder/theredbeard-pi-agent

Comprehensive LLM security assessment against OWASP Top 10 for LLM Applications 2025. Use when reviewing LLM-integrated applications, RAG pipelines, chatbots, AI agents, or GenAI features. Covers prompt injection, data poisoning, supply chain, excessive agency, and more with real-world attack scenarios and testing methodologies.

2026-05-192

name	agentic-ai-risk-assess
description	Assess agentic AI applications against the OWASP Top 10 for Agentic Applications 2026. Use when reviewing autonomous AI agents, multi-agent systems, or agentic workflows for security risks including goal hijacking, tool misuse, privilege abuse, and rogue agent behavior.
license	CC-BY-4.0

Agentic AI Risk Assessment

Evaluate agentic AI applications against all 10 risk categories by following the full procedure in plays/agentic-ai-risk-assess.md.

Steps

Architecture Mapping — Identify agent type (single/multi-agent), autonomy level, tool ecosystem, memory systems, inter-agent communication protocols, and human oversight mechanisms.
Assess Each Agentic Top 10 Risk:
- ASI01 Agent Goal Hijack — Hidden prompts, instruction override, silent exfiltration via copilot patterns
- ASI02 Tool Misuse — Legitimate tools bent into destructive outputs, tool parameter manipulation
- ASI03 Identity & Privilege Abuse — Leaked credentials, excessive permissions, agent operating beyond scope
- ASI04 Agentic Supply Chain — Poisoned MCP/A2A components, runtime component tampering, dynamic ecosystem risks
- ASI05 Unexpected Code Execution — Natural language execution paths leading to RCE, code generation vulnerabilities
- ASI06 Memory & Context Poisoning — Long-term behavior manipulation via memory attacks, context window exploits
- ASI07 Insecure Inter-Agent Communication — Spoofed messages, man-in-the-middle between agents, cluster misdirection
- ASI08 Cascading Failures — False signals propagating through automated pipelines, escalating impact chains
- ASI09 Human-Agent Trust Exploitation — Confident misleading explanations, social engineering of human operators
- ASI10 Rogue Agents — Misalignment, concealment, self-directed action, emergent harmful behavior
Synthesize Findings — Assign severity based on exploitability and deployment context. Provide code locations, configuration gaps, and concrete remediation.

Output

Architecture overview, risk matrix (all 10 categories with status), detailed findings using templates/finding.md, positive controls observed, and prioritized recommendations.

OWASP References

OWASP Top 10 for Agentic Applications 2026
OWASP GenAI Security Project
OWASP Agentic Security Initiative