Owasp Ai Testing

This implements the OWASP AI Testing Guide v1 as a structured testing methodology for AI systems. You get 32 test cases across four layers: application (prompt injection, data leaks), model (robustness, alignment), infrastructure (supply chain), and data (bias, privacy). Each test includes objectives, payloads, observable indicators, and remediation steps. The skill requires system descriptions and testing authorization as inputs, and it defaults to documentation-only mode unless you explicitly approve active testing. Worth noting that this is a how-to-test guide, not a vulnerability checklist, so pair it with OWASP LLM Top 10 if you need threat identification alongside the testing procedures.

skills.sh installs: 245
GitHub stars: 69
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add mastepanoski/claude-skills --skill owasp-ai-testing --agent claude-code

Installs into .claude/skills of the current project.

Files

OWASP AI Testing Guide

This skill enables AI agents to perform systematic trustworthiness testing of AI systems using the OWASP AI Testing Guide v1, published November 2025 by the OWASP Foundation.

The AI Testing Guide is the industry's first open standard for AI trustworthiness testing. Unlike vulnerability lists that identify WHAT risks exist, this guide provides a practical, repeatable methodology for HOW to test AI systems. It establishes 32 test cases across 4 layers, each with objectives, payloads, observable responses, and remediation guidance.

The guide's core principle: "Security is not sufficient, AI Trustworthiness is the real objective." AI systems fail for reasons beyond traditional security, including bias, hallucinations, misalignment, opacity, and data quality issues.

Use this skill to execute comprehensive AI testing, validate trustworthiness controls, prepare for audits, and build repeatable test suites for AI systems.

Combine with "OWASP LLM Top 10" for vulnerability identification, "NIST AI RMF" for risk management, or "ISO 42001 AI Governance" for governance compliance.