# OWASP Agentic Skills Top 10: What Developers Must Fix Now > Source: > Published: 2026-09-13 23:09:56+00:00 Five of the top seven most-downloaded AI agent skills at peak infection during the ClawHavoc campaign were confirmed malware. Not flagged, not suspected — confirmed. OWASP published the framework that explains how this keeps happening: the Agentic Skills Top 10 (AST10), released August 17, 2026, following Black Hat and DEF CON. If you’re building with or deploying AI agents, this is the document you need. A quick definition: an agentic skill is a reusable bundle of instructions, code, and resources that an AI agent discovers, loads, and runs autonomously. Physically, it’s a folder with a SKILL.md file — YAML metadata […] The post