OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
Resources
1Install
npx skillscat add microsoft/hve-core/owasp-agentic Install via the SkillsCat registry.
OWASP® Agentic Top 10 — Skill Entry
This SKILL.md is the entrypoint for the OWASP Agentic Top 10 skill.
The skill encodes the OWASP Top 10 for Agentic Applications (2026) as structured,
machine-readable references that an agent can query to identify, assess, and remediate
security risks in AI agent systems.
Normative references (Agentic Top 10)
- 00 Vulnerability Index
- 01 Agent Goal Hijack
- 02 Tool Misuse and Exploitation
- 03 Identity and Privilege Abuse
- 04 Agentic Supply Chain Vulnerabilities
- 05 Unexpected Code Execution
- 06 Memory and Context Poisoning
- 07 Insecure Inter-Agent Communication
- 08 Cascading Failures
- 09 Human-Agent Trust Exploitation
- 10 Rogue Agents
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Agentic Top 10 normative documents.00-vulnerability-index.md— index of all vulnerability identifiers, categories, and cross-references.01through10— one document per vulnerability aligned with OWASP Agentic Security numbering.
Third-Party Attribution
Copyright © OWASP Foundation.
OWASP® Top 10 for Agentic Applications (2026) content is derived from works by the
OWASP Foundation, licensed under CC BY-SA 4.0
(https://creativecommons.org/licenses/by-sa/4.0/).
Source: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/
Modifications: Vulnerability descriptions restructured into agent-consumable reference
documents with added detection and remediation guidance.
OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.