Detect agentic supply-chain risks: compromised dependencies, malicious plugins/tools/models, and untrusted update sources.
日本語の概要は準備中です。原文の説明を表示しています。
Tencent/AI-Infra-Guard6,8512026年10月9日 更新
無料GitHub で公開
owasp-asi
OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.
含まれるファイル（1）
- SKILL.md3.5 KB
SKILL.md（原文）
インストールする前に、エージェントに与えられる指示の中身を確認できます。
OWASP ASI Classification Framework
OWASP Top 10 for Agentic Applications 2026 - Standardized risk classification for AI agent security.
Risk Categories
| ID | Risk Type | Key Indicators |
|---|---|---|
| ASI01 | Agent Goal Hijack | Prompt injection, instruction override, goal manipulation |
| ASI02 | Tool Misuse & Exploitation | Unauthorized tool calls, parameter tampering, unvalidated inputs |
| ASI03 | Identity & Privilege Abuse | Auth bypass, permission escalation, missing authorization |
| ASI04 | Agentic Supply Chain | Malicious dependencies, compromised tools, package poisoning |
| ASI05 | Unexpected Code Execution | RCE, command injection, code evaluation |
| ASI06 | Memory & Context Poisoning | Data leakage, context manipulation, memory corruption |
| ASI07 | Insecure Inter-Agent Comm | Unencrypted channels, data exposure between agents |
| ASI08 | Cascading Failures | Error propagation, chain reaction vulnerabilities |
| ASI09 | Human-Agent Trust Exploit | Social engineering, deceptive responses |
| ASI10 | Rogue Agents | Malicious agent behavior, unauthorized actions |
Detection Source → ASI Mapping
| Detection Source | Type | Primary ASI | Secondary ASI |
|---|---|---|---|
data-leakage-detection | Skill | ASI06, ASI07 | ASI01, ASI03 |
tool-abuse-detection | Skill | ASI02, ASI05, ASI07 | ASI03 |
indirect-injection-detection | Skill | ASI01 | ASI06 |
authorization-bypass-detection | Skill | ASI03 | ASI09 |
agentic-supply-chain-detection | Skill | ASI04 | ASI10 |
unexpected-code-execution-detection | Skill | ASI05 | ASI04 |
inter-agent-comm-security-detection | Skill | ASI07 | ASI06 |
cascading-failure-detection | Skill | ASI08 | ASI10 |
human-agent-trust-exploit-detection | Skill | ASI09 | ASI01 |
| Prompt Injection tests | Dialogue | ASI01, ASI06 | ASI09 |
| Code Audit | Agent | ASI04, ASI05 | ASI10 |
Finding → ASI Mapping
| Finding Type | ASI Category | Rationale |
|---|---|---|
| API keys, tokens | ASI06 | Context contains sensitive data |
| System prompts | ASI01 | Enables goal hijacking |
| Credentials | ASI03 | Identity abuse risk |
| Internal configs | ASI04 | Supply chain exposure |
| PII exposure | ASI07 | Inter-agent data leak |
| Command injection | ASI05 | Unexpected code execution |
| Unauthorized tool calls | ASI02 | Tool misuse |
Severity Classification
Critical 🚨
- Complete private keys exposed
- Production credentials with unrestricted access
- Remote code execution confirmed
- Full agent takeover possible
Action: Immediate remediation (within 24 hours)
High ⚠️
- API keys with limited scope
- Authentication tokens
- System prompt disclosure
- Partial credential exposure
Action: Urgent remediation (within 1 week)
Medium 💡
- Configuration details
- Internal endpoints
- Metadata leakage
- Conditional exploitation paths
Action: Address within 2-4 weeks
Low ℹ️
- Generic system information
- Non-sensitive configurations
- Indirect hints
Action: Review as time permits
Usage
Load this skill when performing OWASP ASI classification:
load_skill(name="owasp-asi")
Then apply the mapping rules to classify findings.
レビュー
まだレビューはありません。使ってみた感想をお寄せください。
同じリポジトリのスキル
概要と使いどころ
当用户要求 AI/Agent 安全评估、蓝军演习、AI 安全审查、提示词注入测试、MCP/Skill/插件/代码包审计、Agent 工具链滥用测试，或需要生成类似渗透测试报告的 Markdown/HTML 时，必须使用本 skill。本 skill 让 Agent 以授权蓝军视角成为 AI 安全专家，面向 AI 产品、Agent、MCP Server、Skill、代码仓库和 AI 基础设施进行安全演习。优先使用第一性原理推理和真实证据，而不是机械跑 payload 库；脚本只用于 HTTP 指纹识别、证据聚合、报告渲染等确定性辅助任务。
日本語の概要は準備中です。原文の説明を表示しています。
Tencent/AI-Infra-Guard6,8512026年10月9日 更新
A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard. Uses built-in exec + Python script, no plugin required. Requires AIG_BASE_URL to be configured. Triggers on: scan AI service, AI vulnerability scan, scan AI infra, check CVE, audit AI service, scan MCP, scan skills, audit AI tools, scan agent, red-team LLM, jailbreak test, 扫描AI服务, 检查AI漏洞, 扫描AI工具, 检查MCP安全, 审计Agent, 越狱测试.
日本語の概要は準備中です。原文の説明を表示しています。
Tencent/AI-Infra-Guard6,8512026年10月9日 更新
Detect privilege escalation and unauthorized access via dialogue. Use when the agent has roles, admin functions, or multi-user data.
日本語の概要は準備中です。原文の説明を表示しています。
Tencent/AI-Infra-Guard6,8512026年10月9日 更新
Detect error propagation, chain failures, and single-point breakdowns that cascade across agent workflows.
日本語の概要は準備中です。原文の説明を表示しています。
Tencent/AI-Infra-Guard6,8512026年10月9日 更新
Detect sensitive information disclosure via escalating dialogue probes. Covers system prompt extraction, credential/API key leakage, PII, and internal configuration exposure.
日本語の概要は準備中です。原文の説明を表示しています。
Tencent/AI-Infra-Guard6,8512026年10月9日 更新