agent-owasp-compliance
适合上线前的安全评估，覆盖 ASI 十大风险点。
需要访问代码库并可能执行安全扫描或脚本，注意权限与隐私。
根据 OWASP ASI Top10 检查 AI agent 代码库的安全合规性。
把你代理类代码库对照 OWASP ASI Top 10 做一次安全体检，找出像越权、滥用工具、外部访问等特有风险。适合上线前合规审计、生成报告或把现有控制映射到 ASI 标准时用。重点是针对 agent（能调用工具、访问系统的代理）而不是一般的 LLM 或聊天机器人。
▸ 展开 SKILL.md 英文原文
Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance check against OWASP ASI 2026 standards - Mapping existing security controls to the 10 agentic risks - Generating a compliance report for security review or audit - Comparing agent framework security features against the standard - Any request like "is my agent OWASP compliant?", "check ASI compliance", or "agentic security audit"
帮我安装这个 skill：https://raw.githubusercontent.com/github/awesome-copilot/main/skills/agent-owasp-compliance/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/agent-owasp-compliance/SKILL.md"# Agent OWASP ASI Compliance Check Evaluate AI agent systems against the OWASP Agentic Security Initiative (ASI) Top 10 — the industry standard for agent security posture. ## Overview The OWASP ASI Top 10 defines the critical security risks specific to autonomous AI agents — not LLMs, not chatbots, but agents that call tools, access systems, and act on behalf of users. This skill checks whether your agent implementation addresses each risk. ``` Codebase → Scan for each ASI control: ASI-01: Prompt Injection Protection ASI-02: Tool Use Governance ASI-03: Agency Boundaries ASI-04: Escalation Controls ASI-05: Trust Boundary Enforcement ASI-06: Logging & Audit ASI-07: Identity M