Owasp LLM

microsoft/owasp-llm

OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.

19k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

1313

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/microsoft/hve-core --skill owasp-llm

What comes with it

75 178 bytes besides the instruction

references/00-vulnerability-index.md

references/01-prompt-injection.md

references/02-sensitive-information-disclosure.md

references/03-supply-chain.md

references/04-data-and-model-poisoning.md

references/05-improper-output-handling.md

references/06-excessive-agency.md

references/07-system-prompt-leakage.md

references/08-vector-and-embedding-weaknesses.md

references/09-misinformation.md

references/10-unbounded-consumption.md

The instruction itself

4 sections, as written by the author

OWASP® LLM Top 10 — Skill Entry

This SKILL.md is the entrypoint for the OWASP LLM Top 10 skill.

The skill encodes the OWASP Top 10 for LLM Applications (2025) as structured,

machine-readable references that an agent can query to identify, assess, and remediate

security risks in large language model systems.

Normative references (LLM Top 10)

00 Vulnerability Index
01 Prompt Injection
02 Sensitive Information Disclosure
03 Supply Chain
04 Data and Model Poisoning
05 Improper Output Handling
06 Excessive Agency
07 System Prompt Leakage
08 Vector and Embedding Weaknesses

10. 09 Misinformation

11. 10 Unbounded Consumption

Skill layout

SKILL.md — this file (skill entrypoint).
references/ — the LLM Top 10 normative documents.
00-vulnerability-index.md — index of all vulnerability identifiers, categories, and cross-references.
01 through 10 — one document per vulnerability aligned with OWASP LLM Applications numbering.

Third-Party Attribution

OWASP® Top 10 for LLM Applications (2025) content is derived from works by the

OWASP Foundation, licensed under CC BY-SA 4.0

(<https://creativecommons.org/licenses/by-sa/4.0/>).

Source: <https://genai.owasp.org/resource/owasp-top-10-for-llm-applications-2025/>

Modifications: Vulnerability descriptions restructured into agent-consumable reference

documents with added detection and remediation guidance.

OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.

How to use it

Copy the folder

Take microsoft/owasp-llm from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.