Overview
agent-owasp-compliance is an open-source security skill for Claude Code and compatible agents, published by github. Its author describes it as: “Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance ch…”. The project has 38k stars on GitHub and is available under the MIT license. Add it to your setup with `git clone https://github.com/github/awesome-copilot ~/.claude/skills/agent-owasp-compliance`.
What agent-owasp-compliance does
Evaluate AI agent systems against the OWASP Agentic Security Initiative (ASI) Top 10 — the industry standard for agent security posture.
Best for
What’s inside
The SKILL.md for agent-owasp-compliance is organised into these sections:
- Overview
- The 10 Risks
- Check ASI-01: Prompt Injection Protection
- Check ASI-02: Insecure Tool Use
- Check ASI-03: Excessive Agency
- Check ASI-04: Unauthorized Escalation
- Check ASI-05: Trust Boundary Violation
- Check ASI-06: Insufficient Logging
- Check ASI-07: Insecure Identity
- Check ASI-08: Policy Bypass
- Check ASI-09: Supply Chain Integrity
- Check ASI-10: Behavioral Anomaly
Installation
Add agent-owasp-compliance to your agent with:
git clone https://github.com/github/awesome-copilot ~/.claude/skills/agent-owasp-complianceReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- GitHub Copilot — declared in the repository topics
License
agent-owasp-compliance is published under the MIT license.
Strengths
- Clear MIT license — safe to read and adapt within its terms
- Ships in github/awesome-copilot, an established project with 37,982 GitHub stars
- Works with GitHub Copilot
- Actively maintained — repository updated in the last 90 days
Author
Topics
Frequently asked questions
- What does agent-owasp-compliance do?
- Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance check against OWASP ASI 2026 standards - Mapping existing security controls to the 10 agentic risks - Generating a compliance report for security review or audit - Comparing agent framework security features against the standard - Any request like "is my agent OWASP compliant?", "check ASI compliance", or "agentic security audit"
- How do I install agent-owasp-compliance?
- Run git clone https://github.com/github/awesome-copilot ~/.claude/skills/agent-owasp-compliance in your agent, then reload your skills. Review the source at https://github.com/github/awesome-copilot before installing.
- Is agent-owasp-compliance free to use?
- Yes. agent-owasp-compliance is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Which agents does agent-owasp-compliance work with?
- agent-owasp-compliance lists GitHub Copilot — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does agent-owasp-compliance come from?
- agent-owasp-compliance ships inside github/awesome-copilot, a repository that contains 41 catalogued skills in total. The repository's 37,982 GitHub stars apply to that whole collection, not to this skill on its own.
