OWASP Agentic Skills Top 10: What Developers Must Fix Now

OWASP released the Agentic Skills Top 10 (AST10) framework on August 17, 2026, following Black Hat and DEF CON, to address security flaws in reusable AI agent skills. The framework arrived after five of the top seven most-downloaded AI agent skills at peak infection during the ClawHavoc campaign were confirmed malware. An agentic skill is a reusable bundle of instructions, code, and resources that an AI agent discovers, loads, and runs autonomously, typically stored as a folder with a SKILL.md file.

Five of the top seven most-downloaded AI agent skills at peak infection during the ClawHavoc campaign were confirmed malware. Not flagged, not suspected — confirmed. OWASP published the framework that explains how this keeps happening: the Agentic Skills Top 10 AST10 , released August 17, 2026, following Black Hat and DEF CON. If you’re building with or deploying AI agents, this is the document you need. A quick definition: an agentic skill is a reusable bundle of instructions, code, and resources that an AI agent discovers, loads, and runs autonomously. Physically, it’s a folder with a SKILL.md file — YAML metadata … The post