OWASP Agentic Top 10 [Part 2] | Episode 72

In this episode of BHIS Presents: AI Security Ops, the team continues its breakdown of the OWASP Agentic Skills Top 10, covering risks six through ten.

Agentic skills may look like simple instructions, but they operate inside AI systems with access to tools, files, networks, and other resources. So what happens when those skills aren’t isolated, verified, monitored, or governed?

We dig into:

- AST06: Weak Isolation

- AST07: Update Drift

- AST08: Poor Scanning

- AST09: No Governance

- AST10: Cross-Platform Reuse

- Why sandboxing the agent isn’t the same as isolating individual skills

- The security tradeoffs between automatic updates and outdated skills

- Why traditional scanners struggle with malicious instructions written in plain English

- The importance of maintaining an inventory of agentic skills