OWASP Flags Top AI Skill Risks in New Security Blueprint

The OWASP has released a new top 10 list focusing on security risks associated with "skills" – essentially, scripts that add functionality to agentic AI platforms. The primary risk is malicious skills, often introduced through compromised supply chains and external resources. To address this, OWASP has created a Universal Skill Format to help automate the detection of legitimate versus malicious skills, and emphasizes the need for organizations to gain visibility into which skills their agents are using.