🎯

agent-owasp-compliance

🎯Skill

from github/awesome-copilot

What it does

Audit an AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 — prompt injection (ASI-01), tool-use governance (ASI-02), excessive agency (ASI-03), unauthorized escalation (ASI-04), trust boundary violation (ASI-05), insufficient logging (ASI-06), insecure identity (ASI-07), policy bypass (ASI-08), supply-chain integrity (ASI-09), behavioral anomaly (ASI-10). Ships per-check Python scanners that look for positive controls (PolicyEvaluator, allowlists, DIDs, chain-hashed audit trails) and anti-patterns (`eval`, `subprocess.run(shell=True)`, `@latest`).

📦

Same repository

github/awesome-copilot(363 items)

agent-owasp-compliance

Installation

Vibe Index InstallInstalls to .claude/skills/

npx vibeindex add github/awesome-copilot --skill agent-owasp-compliance

skills.sh Install⚠ Installs to .agents/skills/

npx skills add github/awesome-copilot --skill agent-owasp-compliance

Manual InstallCopy SKILL.md content and save to the path below

~/.claude/skills/agent-owasp-compliance/SKILL.md

SKILL.md

911Installs

AddedApr 13, 2026

View on GitHub Back to Skills

More from this repository10

🎯

git-commit🎯Skill

A community-curated collection of custom agents, prompts, instructions, and skills to enhance GitHub Copilot across different domains, languages, and use cases.

🎯

excalidraw-diagram-generator🎯Skill

Generates Excalidraw diagrams from natural language descriptions, creating visual representations of processes, systems, relationships, and ideas.

🎯

gh-cli🎯Skill

A community-curated collection of custom agents, prompts, instructions, and skills to enhance GitHub Copilot across different domains, languages, and use cases.

🎯

documentation-writer🎯Skill

Expert technical writer guided by the Diataxis framework, creating tutorials, how-to guides, reference docs, and explanation pages for software documentation.

🎯

prd🎯Skill

Generates comprehensive Product Requirements Documents (PRDs) by systematically analyzing requirements and crafting detailed technical specifications

🎯

refactor🎯Skill

A community-curated collection of custom agents, prompts, instructions, and skills to enhance GitHub Copilot across different domains, languages, and use cases.

🎯

java-springboot🎯Skill

Provides Spring Boot best practices covering project setup, dependency injection, REST API design, data access with JPA, security configuration, and testing strategies.

🎯

multi-stage-dockerfile🎯Skill

Creates optimized multi-stage Dockerfiles for any language or framework, separating builder and runtime stages to produce smaller, more secure container images.

🎯

create-readme🎯Skill

Creates README.md files for projects.

🎯

playwright-generate-test🎯Skill

Generates Playwright end-to-end tests from user-described scenarios using Playwright MCP for browser automation.