owasp-infrastructure
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
Resources
1Install
npx skillscat add microsoft/hve-core/owasp-infrastructure Install via the SkillsCat registry.
This skill provides a structured, machine-readable knowledge base of the OWASP Infrastructure Security Top 10 risks, enabling agents to identify, assess, and remediate internal IT infrastructure vulnerabilities. It addresses the challenge of systematically applying infrastructure security best practices by encoding each risk category with detailed references. Developers and agents should use it when evaluating or hardening internal infrastructure against common security weaknesses.
OWASP Infrastructure Top 10 — Skill Entry
This SKILL.md is the entrypoint for the OWASP Infrastructure Top 10 skill.
The skill encodes the OWASP Infrastructure Security Top 10 (2024) as structured,
machine-readable references that an agent can query to identify, assess, and remediate
infrastructure security risks.
Normative references (Infrastructure Top 10)
- 00 Vulnerability Index
- 01 Outdated Software
- 02 Insufficient Threat Detection
- 03 Insecure Configurations
- 04 Insecure Resource and User Management
- 05 Insecure Use of Cryptography
- 06 Insecure Network Access Management
- 07 Insecure Authentication Methods and Default Credentials
- 08 Information Leakage
- 09 Insecure Access to Resources and Management Components
- 10 Insufficient Asset Management and Documentation
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Infrastructure Top 10 normative documents.00-vulnerability-index.md— index of all vulnerability identifiers, categories, and cross-references.01through10— one document per vulnerability aligned with OWASP Infrastructure Security numbering.
Categories
Install
npx skillscat add microsoft/hve-core/owasp-infrastructure Install via the SkillsCat registry.
Repository Stars
The star count shown is for the parent repository (microsoft/hve-core), not this specific skill.
.github/skills/security/owasp-infrastructure