OWASP FLAGS TOP AI SKILL RISKS IN NEW SECURITY BLUEPRINT

Summary from the TLDR InfoSec newsletter

OWASP released its Agentic Skills Top 10 and Universal Agentic Skill Format v1.0. Malicious skills and supply-chain compromise rank first and second. A Paperclip impersonation campaign used Trojanized packages and skills. The skills exceeded 300,000 installs, and it shows that the skill format should record provenance, permissions, dependencies, hashes, and changes. Security teams should inventory agent skills and quickly disable flagged ones.