Cómo usar
- Copia el comando y revisa el paquete antes de instalarlo en tu entorno de agente.
- Consulta las herramientas, credenciales y entornos necesarios en el documento original.
- Describe las entradas y el resultado deseado; contrasta la salida con las fuentes.
npx skills add https://github.com/microsoft/hve-core --skill owasp-top-10Antes de empezar
- La instalación no incluye suscripción al modelo, cuota API ni permisos sobre tus archivos.
- Las estrellas e instalaciones reflejan actividad, no una prueba independiente de calidad o seguridad.
Contenido del repositorio de origen con títulos, ejemplos, código, tablas, enlaces e imágenes preservados.
OWASP® Top 10 — Skill Entry
This SKILL.md is the entrypoint for the OWASP Top 10 skill.
The skill encodes the OWASP Top 10 for Web Applications (2025) as structured, machine-readable references that an agent can query to identify, assess, and remediate web application security risks.
Normative references (Web Top 10)
- 00 Vulnerability Index
- 01 Broken Access Control
- 02 Security Misconfiguration
- 03 Software Supply Chain Failures
- 04 Cryptographic Failures
- 05 Injection
- 06 Insecure Design
- 07 Authentication Failures
- 08 Software or Data Integrity Failures
- 09 Security Logging and Alerting Failures
- 10 Mishandling of Exceptional Conditions
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Web Top 10 normative documents.00-vulnerability-index.md— index of all vulnerability identifiers, categories, and cross-references.01through10— one document per vulnerability aligned with OWASP Web Application Security numbering.
Third-Party Attribution
Copyright © OWASP Foundation. OWASP® Top 10 (2025) content is derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0 (<https://creativecommons.org/licenses/by-sa/4.0/>). Source: <https://owasp.org/Top10/2025/> Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.
