owasp-infrastructure
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
소스 정보
- 저장소
- microsoft/hve-core
- 최근 소스 활동
- 2026년 10월 27일 10:25
- 감지된 SKILL.md 언어
- 영어
- 스타
- 1,614
- 포크
- 356
설치 방법
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
소스 파일 검토
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
파일 탐색기
12 개 파일SKILL.md 표시 중
SKILL.md
소스 지침 · 읽기 전용 미리보기- name
- owasp-infrastructure
- description
- OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
- license
- CC-BY-SA-4.0
- user-invocable
- false
- metadata
- {"authors":"OWASP Infrastructure Security Project","spec_version":"1.0","framework_revision":"1.0.0","last_updated":"2026-02-13","skill_based_on":"https://github.com/chris-buckley/agnostic-prompt-standard","content_based_on":"https://owasp.org/www-project-top-10-infrastructure-security-risks/"}
# OWASP® Infrastructure Top 10 — Skill Entry
This `SKILL.md` is the **entrypoint** for the OWASP Infrastructure Top 10 skill.
The skill encodes the **OWASP Infrastructure Security Top 10 (2024)** as structured,
machine-readable references that an agent can query to identify, assess, and remediate
infrastructure security risks.
## Normative references (Infrastructure Top 10)
1. [00 Vulnerability Index](references/00-vulnerability-index.md)
2. [01 Outdated Software](references/01-outdated-software.md)
3. [02 Insufficient Threat Detection](references/02-insufficient-threat-detection.md)
4. [03 Insecure Configurations](references/03-insecure-configurations.md)
5. [04 Insecure Resource and User Management](references/04-insecure-resource-user-management.md)
6. [05 Insecure Use of Cryptography](references/05-insecure-use-of-cryptography.md)
7. [06 Insecure Network Access Management](references/06-insecure-network-access-management.md)
8. [07 Insecure Authentication Methods and Default Credentials](references/07-insecure-authentication-default-credentials.md)
9. [08 Information Leakage](references/08-information-leakage.md)
10. [09 Insecure Access to Resources and Management Components](references/09-insecure-access-resources-management-components.md)
11. [10 Insufficient Asset Management and Documentation](references/10-insufficient-asset-management-documentation.md)
## Skill layout
* `SKILL.md` — this file (skill entrypoint).
* `references/` — the Infrastructure Top 10 normative documents.
* `00-vulnerability-index.md` — index of all vulnerability identifiers, categories, and cross-references.
* `01` through `10` — one document per vulnerability aligned with OWASP Infrastructure Security numbering.
## Third-Party Attribution
Copyright © OWASP Foundation.
OWASP® Infrastructure Security Top 10 content is derived from works by the
OWASP Foundation, licensed under CC BY-SA 4.0
(<https://creativecommons.org/licenses/by-sa/4.0/>).
Source: <https://owasp.org/www-project-top-10-infrastructure-security-risks/>
Modifications: Vulnerability descriptions restructured into agent-consumable reference
documents with added detection and remediation guidance.
OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.
GitHub에서 보기