Owasp Llm Top10

This is a security audit framework based on the 2025 OWASP Top 10 for LLM Applications, the industry standard for GenAI security risks. It walks you through assessing prompt injection, sensitive data disclosure, supply chain vulnerabilities, data poisoning, and six other critical threat categories specific to LLM systems. You get checklists and mitigation strategies for each risk area. Use it when you're hardening a RAG system, reviewing chatbot security before production, or conducting penetration tests on AI features. It's thorough but assumes you understand your application architecture well enough to map these risks to your specific setup. Good companion to NIST AI RMF if you need broader risk management context.

skills.sh installs: 409
GitHub stars: 69
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add mastepanoski/claude-skills --skill owasp-llm-top10 --agent claude-code

Installs into .claude/skills of the current project.

Files

OWASP Top 10 for LLM Applications Security Audit

This skill enables AI agents to perform a comprehensive security assessment of Large Language Model (LLM) and Generative AI applications using the OWASP Top 10 for LLM Applications 2025, published by the OWASP GenAI Security Project.

The OWASP Top 10 for LLM Applications identifies the most critical security risks in systems that integrate large language models, covering vulnerabilities from prompt injection to unbounded resource consumption. This is the authoritative industry standard for LLM application security.

Use this skill to identify security vulnerabilities, assess risk exposure, prioritize remediation, and establish secure development practices for AI-powered applications.

Combine with "NIST AI RMF" for comprehensive risk management or "ISO 42001 AI Governance" for governance compliance.