OWASP Agentic Top 10 [Part 1] | Episode 70

In this episode of BHIS Presents: AI Security Ops, the team breaks down the first five risks in the OWASP Agentic Skills Top 10 (Part 1).

Agentic skills can give AI systems reusable instructions, workflows, and capabilities — but they also introduce a new attack surface. A skill may look like a simple markdown file, yet the agent following those instructions could have access to your filesystem, credentials, network, shell, or other sensitive resources.

We dig into:

- AST01: Malicious Skills

- AST02: Supply Chain Compromise

- AST03: Overprivileged Skills

- AST04: Insecure Metadata

- AST05: Untrusted External Instructions

- Why skills should be treated more like software than configuration

- How excessive permissions increase an agent’s blast radius

- Why external content creates indirect prompt injection risks

- How isolation, least privilege, and trusted sources can reduce risk