Agent Skills › Tencent/AI-Infra-Guard › owasp-asi

owasp-asi

GitHub

基于OWASP ASI 2026框架，用于将AI智能体安全发现映射到标准化风险类别。提供十大风险分类、检测源映射及严重性分级，辅助安全审计与风险评估。

agent-scan/agent_scan/prompt/skills/owasp-asi/SKILL.md Tencent/AI-Infra-Guard

Trigger Scenarios

安全漏洞发现与分类 AI智能体安全风险评估安全审计报告生成

Install

npx skills add Tencent/AI-Infra-Guard --skill owasp-asi -g -y

More Options

Non-standard path

npx skills add https://github.com/Tencent/AI-Infra-Guard/tree/main/agent-scan/agent_scan/prompt/skills/owasp-asi -g -y

Use without installing

npx skills use Tencent/AI-Infra-Guard@owasp-asi

指定 Agent (Claude Code)

npx skills add Tencent/AI-Infra-Guard --skill owasp-asi -a claude-code -g -y

安装 repo 全部 skill

npx skills add Tencent/AI-Infra-Guard --all -g -y

预览 repo 内 skill

npx skills add Tencent/AI-Infra-Guard --list

SKILL.md

Frontmatter

{
    "name": "owasp-asi",
    "description": "OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories."
}

OWASP ASI Classification Framework

OWASP Top 10 for Agentic Applications 2026 - Standardized risk classification for AI agent security.

Risk Categories

ID	Risk Type	Key Indicators
ASI01	Agent Goal Hijack	Prompt injection, instruction override, goal manipulation
ASI02	Tool Misuse & Exploitation	Unauthorized tool calls, parameter tampering, unvalidated inputs
ASI03	Identity & Privilege Abuse	Auth bypass, permission escalation, missing authorization
ASI04	Agentic Supply Chain	Malicious dependencies, compromised tools, package poisoning
ASI05	Unexpected Code Execution	RCE, command injection, code evaluation
ASI06	Memory & Context Poisoning	Data leakage, context manipulation, memory corruption
ASI07	Insecure Inter-Agent Comm	Unencrypted channels, data exposure between agents
ASI08	Cascading Failures	Error propagation, chain reaction vulnerabilities
ASI09	Human-Agent Trust Exploit	Social engineering, deceptive responses
ASI10	Rogue Agents	Malicious agent behavior, unauthorized actions

Detection Source → ASI Mapping

Detection Source	Type	Primary ASI	Secondary ASI
`data-leakage-detection`	Skill	ASI06, ASI07	ASI01, ASI03
`tool-abuse-detection`	Skill	ASI02, ASI05, ASI07	ASI03
`indirect-injection-detection`	Skill	ASI01	ASI06
`authorization-bypass-detection`	Skill	ASI03	ASI09
`agentic-supply-chain-detection`	Skill	ASI04	ASI10
`unexpected-code-execution-detection`	Skill	ASI05	ASI04
`inter-agent-comm-security-detection`	Skill	ASI07	ASI06
`cascading-failure-detection`	Skill	ASI08	ASI10
`human-agent-trust-exploit-detection`	Skill	ASI09	ASI01
Prompt Injection tests	Dialogue	ASI01, ASI06	ASI09
Code Audit	Agent	ASI04, ASI05	ASI10

Finding → ASI Mapping

Finding Type	ASI Category	Rationale
API keys, tokens	ASI06	Context contains sensitive data
System prompts	ASI01	Enables goal hijacking
Credentials	ASI03	Identity abuse risk
Internal configs	ASI04	Supply chain exposure
PII exposure	ASI07	Inter-agent data leak
Command injection	ASI05	Unexpected code execution
Unauthorized tool calls	ASI02	Tool misuse