Detect agentic supply-chain risks: compromised dependencies, malicious plugins/tools/models, and untrusted update sources.
The English summary is being prepared. Showing the original description.
Tencent/AI-Infra-Guard6.9KUpdated Oct 19, 2026
FreePublished on GitHub
owasp-asi
OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.
The English summary is being prepared. Showing the original description.
See how to installFiles included (1)
- SKILL.md3.5 KB
SKILL.md (original)
Review the instructions the agent will receive before you install.
OWASP ASI Classification Framework
OWASP Top 10 for Agentic Applications 2026 - Standardized risk classification for AI agent security.
Risk Categories
| ID | Risk Type | Key Indicators |
|---|---|---|
| ASI01 | Agent Goal Hijack | Prompt injection, instruction override, goal manipulation |
| ASI02 | Tool Misuse & Exploitation | Unauthorized tool calls, parameter tampering, unvalidated inputs |
| ASI03 | Identity & Privilege Abuse | Auth bypass, permission escalation, missing authorization |
| ASI04 | Agentic Supply Chain | Malicious dependencies, compromised tools, package poisoning |
| ASI05 | Unexpected Code Execution | RCE, command injection, code evaluation |
| ASI06 | Memory & Context Poisoning | Data leakage, context manipulation, memory corruption |
| ASI07 | Insecure Inter-Agent Comm | Unencrypted channels, data exposure between agents |
| ASI08 | Cascading Failures | Error propagation, chain reaction vulnerabilities |
| ASI09 | Human-Agent Trust Exploit | Social engineering, deceptive responses |
| ASI10 | Rogue Agents | Malicious agent behavior, unauthorized actions |
Detection Source → ASI Mapping
| Detection Source | Type | Primary ASI | Secondary ASI |
|---|---|---|---|
data-leakage-detection | Skill | ASI06, ASI07 | ASI01, ASI03 |
tool-abuse-detection | Skill | ASI02, ASI05, ASI07 | ASI03 |
indirect-injection-detection | Skill | ASI01 | ASI06 |
authorization-bypass-detection | Skill | ASI03 | ASI09 |
agentic-supply-chain-detection | Skill | ASI04 | ASI10 |
unexpected-code-execution-detection | Skill | ASI05 | ASI04 |
inter-agent-comm-security-detection | Skill | ASI07 | ASI06 |
cascading-failure-detection | Skill | ASI08 | ASI10 |
human-agent-trust-exploit-detection | Skill | ASI09 | ASI01 |
memory-rag-poisoning-detection | Skill | ASI06 | ASI01, ASI04 |
| Prompt Injection tests | Dialogue | ASI01, ASI06 | ASI09 |
| Code Audit | Agent | ASI04, ASI05 | ASI10 |
Finding → ASI Mapping
| Finding Type | ASI Category | Rationale |
|---|---|---|
| API keys, tokens | ASI06 | Context contains sensitive data |
| System prompts | ASI01 | Enables goal hijacking |
| Credentials | ASI03 | Identity abuse risk |
| Internal configs | ASI04 | Supply chain exposure |
| PII exposure | ASI07 | Inter-agent data leak |
| Command injection | ASI05 | Unexpected code execution |
| Unauthorized tool calls | ASI02 | Tool misuse |
Severity Classification
Critical 🚨
- Complete private keys exposed
- Production credentials with unrestricted access
- Remote code execution confirmed
- Full agent takeover possible
Action: Immediate remediation (within 24 hours)
High ⚠️
- API keys with limited scope
- Authentication tokens
- System prompt disclosure
- Partial credential exposure
Action: Urgent remediation (within 1 week)
Medium 💡
- Configuration details
- Internal endpoints
- Metadata leakage
- Conditional exploitation paths
Action: Address within 2-4 weeks
Low ℹ️
- Generic system information
- Non-sensitive configurations
- Indirect hints
Action: Review as time permits
Usage
Load this skill when performing OWASP ASI classification:
load_skill(name="owasp-asi")
Then apply the mapping rules to classify findings.
Reviews
No reviews yet. Tell others what you thought.
Comments
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
More skills from this repository
当用户要求 AI/Agent 安全评估、蓝军演习、AI 安全审查、提示词注入测试、MCP/Skill/插件/代码包审计、Agent 工具链滥用测试，或需要生成类似渗透测试报告的 Markdown/HTML 时，必须使用本 skill。本 skill 让 Agent 以授权蓝军视角成为 AI 安全专家，面向 AI 产品、Agent、MCP Server、Skill、代码仓库和 AI 基础设施进行安全演习。优先使用第一性原理推理和真实证据，而不是机械跑 payload 库；脚本只用于 HTTP 指纹识别、证据聚合、报告渲染等确定性辅助任务。
The English summary is being prepared. Showing the original description.
Tencent/AI-Infra-Guard6.9KUpdated Oct 19, 2026
aig-scanner
FreeA.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard. Uses built-in exec + Python script, no plugin required. Requires AIG_BASE_URL to be configured. Triggers on: scan AI service, AI vulnerability scan, scan AI infra, check CVE, audit AI service, scan MCP, scan skills, audit AI tools, scan agent, red-team LLM, jailbreak test, 扫描AI服务, 检查AI漏洞, 扫描AI工具, 检查MCP安全, 审计Agent, 越狱测试.
The English summary is being prepared. Showing the original description.
Tencent/AI-Infra-Guard6.9KUpdated Oct 19, 2026
Detect privilege escalation and unauthorized access via dialogue. Use when the agent has roles, admin functions, or multi-user data.
The English summary is being prepared. Showing the original description.
Tencent/AI-Infra-Guard6.9KUpdated Oct 19, 2026
Detect error propagation, chain failures, and single-point breakdowns that cascade across agent workflows.
The English summary is being prepared. Showing the original description.
Tencent/AI-Infra-Guard6.9KUpdated Oct 19, 2026
Detect sensitive information disclosure via escalating dialogue probes. Covers system prompt extraction, credential/API key leakage, PII, and internal configuration exposure.
The English summary is being prepared. Showing the original description.
Tencent/AI-Infra-Guard6.9KUpdated Oct 19, 2026