Owasp Asi

OrganizationPopular

Tencent

owasp-asi

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.

Overview

Publisher	Tencent
Repository	`AI-Infra-Guard`
Skill name	`owasp-asi`
Stars	6.4K
Forks	594
Bundled files	Instructions only
License	Apache-2.0
Links	Skill source Repository Homepage

Markdown instructions
A SKILL.md file the model loads on demand, so it only costs tokens when a request actually matches.
Works with any LLM
AI skills are plain Markdown, not provider-specific code, so this works with GPT, Claude, Gemini, Grok, or a local model.
Self-contained
Everything the model needs lives in the instructions — no extra files to sync.
Open source
Published by Tencent on GitHub. Read the source before you install it.

Installation

Install the Owasp Asi AI skill in TypingMind to use it with any LLM, or drop it into another agent that reads SKILL.md.

Install in TypingMind

TypingMind installs a skill straight from its GitHub folder — it reads SKILL.md, bundles the resource files, and stores the result locally.

Open the app and go to Plugins → Skills.
Choose "Install from GitHub".
Paste the skill folder URL below and confirm.
Enable the skill in any chat where you want it available.

Store

Installed

Skills

Add skills

Import one or more skills from a public GitHub folder or a local .skill or .zip archive, or SKILL.md file.

From GitHub URLFrom .skill, .zip, or SKILL.md

GitHub repo or folder

https://github.com/Tencent/AI-Infra-Guard/tree/main/agent-scan/agent_scan/prompt/skills/owasp-asi

Points to a single skill folder, or any folder that contains multiple skills. Public repos only.

CancelContinue

Plugins → Skills → Add skill → From GitHub URL, then paste the folder URL and press Continue.

Install in another agent

Any agent that reads the Agent Skills format can use this skill — copy the folder into that agent's skills directory.

Claude Code — .claude/skills

git clone --depth 1 https://github.com/Tencent/AI-Infra-Guard.git /tmp/AI-Infra-Guard
mkdir -p .claude/skills
cp -r /tmp/AI-Infra-Guard/agent-scan/agent_scan/prompt/skills/owasp-asi .claude/skills/owasp-asi

Restart Claude Code after copying so it picks up the new skill.

Use it in TypingMind

Enable Owasp Asi in any TypingMind chat and the model takes it from there. Its name and description sit in the system prompt, and the moment a request matches, the model loads the full instructions itself — you never invoke it by hand, and it costs no tokens until it is actually used.

The model loads Owasp Asi on its own as soon as a request matches it.

Works with any AI model

AI skills are plain Markdown instructions rather than provider-specific code, so Owasp Asi is not tied to the model it was written for. Install it once in TypingMind and use it with GPT-5, Claude, Gemini, Grok, DeepSeek, Mistral, Llama, or a local model you run yourself — all on your own API keys.

Loaded only when it is needed
The system prompt carries just the name and description. The instructions are fetched on the first matching request, so an idle skill costs nothing.
Switch models mid-chat
Because the skill is instructions rather than code, changing model does not break it — the next model reads the same SKILL.md.

Skill instructions

This is the SKILL.md content the model loads. Read it before installing — a skill is instructions your model will follow.

OWASP ASI Classification Framework

OWASP Top 10 for Agentic Applications 2026 - Standardized risk classification for AI agent security.

Risk Categories

ID	Risk Type	Key Indicators
ASI01	Agent Goal Hijack	Prompt injection, instruction override, goal manipulation
ASI02	Tool Misuse & Exploitation	Unauthorized tool calls, parameter tampering, unvalidated inputs
ASI03	Identity & Privilege Abuse	Auth bypass, permission escalation, missing authorization
ASI04	Agentic Supply Chain	Malicious dependencies, compromised tools, package poisoning
ASI05	Unexpected Code Execution	RCE, command injection, code evaluation
ASI06	Memory & Context Poisoning	Data leakage, context manipulation, memory corruption
ASI07	Insecure Inter-Agent Comm	Unencrypted channels, data exposure between agents
ASI08	Cascading Failures	Error propagation, chain reaction vulnerabilities
ASI09	Human-Agent Trust Exploit	Social engineering, deceptive responses
ASI10	Rogue Agents	Malicious agent behavior, unauthorized actions

Detection Source → ASI Mapping

Detection Source	Type	Primary ASI	Secondary ASI
`data-leakage-detection`	Skill	ASI06, ASI07	ASI01, ASI03
`tool-abuse-detection`	Skill	ASI02, ASI05, ASI07	ASI03
`indirect-injection-detection`	Skill	ASI01	ASI06
`authorization-bypass-detection`	Skill	ASI03	ASI09
`agentic-supply-chain-detection`	Skill	ASI04	ASI10
`unexpected-code-execution-detection`	Skill	ASI05	ASI04
`inter-agent-comm-security-detection`	Skill	ASI07	ASI06
`cascading-failure-detection`	Skill	ASI08	ASI10
`human-agent-trust-exploit-detection`	Skill	ASI09	ASI01
Prompt Injection tests	Dialogue	ASI01, ASI06	ASI09
Code Audit	Agent	ASI04, ASI05	ASI10

Finding → ASI Mapping

Finding Type	ASI Category	Rationale
API keys, tokens	ASI06	Context contains sensitive data
System prompts	ASI01	Enables goal hijacking
Credentials	ASI03	Identity abuse risk
Internal configs	ASI04	Supply chain exposure
PII exposure	ASI07	Inter-agent data leak
Command injection	ASI05	Unexpected code execution
Unauthorized tool calls	ASI02	Tool misuse

Severity Classification

Critical 🚨

Complete private keys exposed
Production credentials with unrestricted access
Remote code execution confirmed
Full agent takeover possible

Action: Immediate remediation (within 24 hours)

High ⚠️

API keys with limited scope
Authentication tokens
System prompt disclosure
Partial credential exposure

Action: Urgent remediation (within 1 week)

Medium 💡

Configuration details
Internal endpoints
Metadata leakage
Conditional exploitation paths

Action: Address within 2-4 weeks

Low ℹ️

Generic system information
Non-sensitive configurations
Indirect hints

Action: Review as time permits

Usage

Load this skill when performing OWASP ASI classification:

python
load_skill(name="owasp-asi")

Then apply the mapping rules to classify findings.

Frequently asked questions

What does the Owasp Asi AI skill do?

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.

Why use Owasp Asi on TypingMind?

Because you install it once and use it with any model. Owasp Asi is plain Markdown rather than provider-specific code, so the same skill runs on GPT-5, Claude, Gemini, Grok, or a local model — and you can switch model mid-chat without it breaking. TypingMind runs on your own API keys, so you pay providers directly instead of a per-seat subscription, and your skills and chats stay in your own storage.

How do I install Owasp Asi in TypingMind?

Open Plugins → Skills → Install from GitHub in TypingMind and paste https://github.com/Tencent/AI-Infra-Guard/tree/main/agent-scan/agent_scan/prompt/skills/owasp-asi. TypingMind reads its SKILL.md and installs it as a skill you can enable per chat.

Which AI models can use Owasp Asi?

Any model you connect in TypingMind. AI skills are plain Markdown instructions rather than provider-specific code, so GPT, Claude, Gemini, Grok, and local models can all load this skill when a request matches it.

How many AI models can I use with Owasp Asi?

As many as you like. As long as a model supports skills, you can use Owasp Asi with it — GPT, Claude, Gemini, Grok, DeepSeek, Mistral, Llama and more — all on TypingMind with your own API keys.

Is the Owasp Asi AI skill free?

Yes. It is published on GitHub by Tencent under the Apache-2.0 license. You only pay your own AI provider for the tokens you use.

What are AI skills?

An AI skill is a reusable instruction bundle that teaches an AI model how to do one specific task. It follows the open Agent Skills format: a SKILL.md file with a name and description, plus any scripts, templates or reference files the model may need. The model reads the instructions only when your request matches the skill, so an installed skill costs nothing until it is used.

How are AI skills different from plugins or MCP servers?

A plugin or MCP server gives a model new tools to call — code that runs somewhere and returns a result. An AI skill gives the model knowledge and process instead: how to approach a task, which steps to follow, what good output looks like. Skills are plain Markdown, so they need no server, no API key and no runtime, and they work with any model.

View all

Dependency Doctor

Shubhamsaboo

CommunityPopular

Checks requirements.txt, pyproject.toml, and package.json dependency manifests for surface-level direct-dependency footguns: standard-library shadowing pins, abandoned backports, unpinned…

Cso

Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)

Cavecrew

When to delegate to `cavecrew-investigator` (locate code), `cavecrew-builder` (1-2 file edit) or `cavecrew-reviewer` (diff review) instead of working inline or using `Explore`. Their output is…

Caveman Review

Compressed code review - one line per finding with location, problem and fix. Use for /caveman-review, "review this PR", or "review the diff".

Overview

Installation

Install in TypingMind

Install in another agent

Use it in TypingMind

Works with any AI model

Skill instructions

OWASP ASI Classification Framework

Risk Categories

Detection Source → ASI Mapping

Finding → ASI Mapping

Severity Classification

Critical 🚨

High ⚠️

Medium 💡

Low ℹ️

Usage

Frequently asked questions

Related AI Skills

Set up your own AI workspace now