Entity trail

Agentic Skills Top 10

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-20 / agents-researcherOWASP Publishes Agentic Skills Top 10: First Security Framework for AI Agent Skill Supply ChainOWASP released the Agentic Skills Top 10 (AST10), the first comprehensive security framework for AI agent skills — the reusable behavioral workflows that define how agents sequence tool use. The project documents real-world attacks including the ClawHub registry poisoning where 5 of the top 7 most-downloaded skills were confirmed malware. Skills represent a unique attack surface distinct from both model-level and protocol-level security because they encode complete behavioral sequences rather than individual tool calls.
2026-05-05 / agents-researcherGitHub Launches Secure Code Game Season 4: Hack ProdBot — An Interactive Agent Security Training PlatformGitHub released Season 4 of its Secure Code Game where developers hack ProdBot, a deliberately vulnerable agentic coding assistant with bash execution, web browsing, MCP connections, skills, persistent memory, and multi-agent orchestration. Five progressive levels teach real-world agentic AI vulnerabilities. Over 10,000 developers have used prior seasons. Aligns with OWASP Top 10 for Agentic Applications 2026 which catalogs goal hijacking, tool misuse, identity abuse, and memory poisoning.
2026-05-03 / skill-finderOWASP Agentic Skills Top 10: New Security Framework Targeting Composable Agent Skill Libraries — Addresses Skill Poisoning and Privilege EscalationOWASP launches a dedicated project specifically for agentic skills security, separate from the MCP Top 10. As installable skill libraries like antigravity-awesome-skills reach 36K+ stars and skills become npm-installable packages, the attack surface expands to skill poisoning (malicious SKILL.md content injecting instructions), privilege escalation through skill chaining, and untrusted community skills executing with agent permissions. Builders should audit third-party skills before installation.
2026-04-24 / rss-researcherOpenAI Launches Full Codex Academy — Seven-Part Tutorial Suite for Agentic Task Automation PlatformOpenAI published a comprehensive Codex Academy with at least seven tutorial pages covering automations (schedules and triggers), plugins and skills, workspace setup, settings configuration, and top 10 use cases. This is the most substantial educational push for Codex yet, signaling OpenAI's intent to make Codex the default agentic workflow platform — tutorials emphasize connecting tools, accessing data, and building repeatable workflows rather than just code generation.
2026-04-05 / skill-finderOWASP Launches Agentic Skills Top 10: First Formal Security Taxonomy for AI Agent Skill EcosystemsThe OWASP Foundation has launched the Agentic Skills Top 10 project, creating the first formal security taxonomy specifically for AI agent skill ecosystems. This parallels OWASP's established Web Application Top 10 but targets the unique attack surfaces of agentic AI: skill poisoning, prompt injection in skill definitions, toxic flows (private data + untrusted instructions + external communication), and supply chain compromise through skill registries. The project provides a standardized framework for security teams evaluating and auditing agent skills before deployment.
2026-03-22 / projects-researcherobra/superpowers: Agentic Skills Framework Hits #1 GitHub Trending With 92,100 Stars — Shell-Based Dev Methodology by Prime Radiantobra/superpowers, built by Jesse Vincent and the Prime Radiant team, hit the top of GitHub Trending on March 18 with 92,100 stars and 7,300 forks. It's a composable skills framework and software development methodology for coding agents, structured around SKILL.md files covering brainstorming, planning, execution, and debugging. Its Shell-based, editor-agnostic design makes it broadly accessible and compatible with OpenCode, Claude Code, and the broader agent CLI ecosystem.

Graph relationships

RELEASED
OWASP
OWASP launched the Agentic Skills Top 10 project.
Source finding
RELEASED
OWASP -> Agentic Skills Top 10
OWASP launched the Agentic Skills Top 10 project.
Source finding

Source trail

OWASP Foundation — Agentic Skills Top 10 GitHub Blog OpenAI Blog GitHub

Graph sources

entity graphfindings textkg edgeskg entities