Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance check against OWASP ASI 2026 standards - Mapping existing security controls to the 10 agentic risks - Generating a compliance report for security review or audit - Comparing agent framework security features against the standard - Any request like "is my agent OWASP compliant?", "check ASI compliance", or "agentic security audit"
- Stars
- 40,760
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 1 finding to review, highest severity high.
- Highest severity
- high
- Findings
- 1
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 1 finding to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (1)
high · 1
- high
Tells Claude to install unpinned packages (agent-governance-toolkit)
SKILL.md:295 · skill_risk:S2
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More security skills and plugins
- ai-prompt-engineering-safety-reviewGitHubComprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and… No issuesSecurityData & analytics41k
- audit-integrityGitHubEnforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat… No issuesSecurityDocuments41k
- incident-postmortemGitHubUse when an outage, production incident, or significant service degradation has occurred and the team needs to write a structured… No issuesSecurityData & analytics41k
- mcp-implementation-security-reviewGitHubReview the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline,… No issuesSecurityAI & agents41k