agent-owasp-compliance SKILL.md skillA
agent-owasp-compliance from marielynneblock/arcanum-artifex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add marielynneblock/arcanum-artifex/agent-owasp-compliance@git:20260710.0115f49Pins git:20260710.0115f49 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- marielynneblock/arcanum-artifex
- Path
skills/agentic/agent-owasp-compliance/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260710.0115f49, committed Jul 10, 2026
- First version recorded
- May 10, 2026
- Size
- 19,490 bytes
- Repository stars
- 4
- License
- none declared
Assess tool-using and multi-agent AI systems against OWASP ASI-style controls, mapping evidence to prompt injection, tool governance, agency, escalation, trust boundaries, audit, identity, policy integrity, supply chain, and behavioural monitoring risks.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Agent OWASP ASI Compliance Review Assess AI agent systems against OWASP Agentic Security Initiative (ASI)-style controls and produce evidence-based gap reports. ## Overview This skill reviews autonomous or tool-using AI agent systems — agents that call tools, access systems, delegate work, or act on behalf of users. It maps observable evidence to ten ASI-style control areas and reports whether each area is covered, partial, missing, unknown, or not applicable. This is a review and reporting skill. It does not implement controls, generate supply-chain manifests, or claim compliance without evidence. ``` System Evidence → Map each ASI control: ASI-01: Prompt Injection Protection ASI-02: Tool Use Governance ASI-03: Agency Boundaries ASI-04: Escalation Controls ASI-05: Trust Boundary Enforcement ASI-06: Logging & Audit ASI-07: Identity Management ASI-08: Policy Integrity ASI-09: Supply Chain Verification ASI-10: Behavioral Monitoring → Produce Evidence-Based Compliance Gap Report ``` ## Use This Skill When - Auditing an existing agent system before production, procurement, or security sign-off …
Read the whole file at its exact version.
How to install
mdr add marielynneblock/arcanum-artifex/agent-owasp-compliance@sha256:52964b554455b296The line at the top of this page pins the label git:20260710.0115f49, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_jnqhvklbptouhbdr)
6 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between May 10, 2026 and Jul 10, 2026, about one every 20 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260710.0115f49 latest | 2026-07-10 | 0115f49 | 19,490 B | A | view · diff |
| git:20260520.f6c6e91 | 2026-05-20 | f6c6e91 | 19,486 B | A | view · diff |
| git:20260515.b861afb | 2026-05-15 | b861afb | 11,377 B | B | view · diff |
| git:20260510.f26bcec | 2026-05-10 | f26bcec | 11,894 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (19490 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
marielynneblock/arcanum-artifex · 4 stars · license none declared · pushed 2026-09-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_jnqhvklbptouhbdr GET https://markdownregistry.com/api/v1/resolve?ref=marielynneblock/arcanum-artifex/agent-owasp-compliance GET https://markdownregistry.com/api/v1/blob/52964b554455b29626fe30e74caaa2557c688f0a1e3649c6d736de37d8565e67
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from marielynneblock/arcanum-artifex
Every file in marielynneblock/arcanum-artifex