owasp-mcp Skill
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks. Published by microsoft in hve-core.
What is owasp-mcp Skill?
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks. Published by microsoft in hve-core. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Technical details
- Install or run with Copy skill directory
When to use owasp-mcp Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/hve-core
- Skill file: .github/skills/security/owasp-mcp/SKILL.md
What it does
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
Skill instructions
OWASP MCP Top 10 — Skill Entry This SKILL.md is the entrypoint for the MCP Vulnerabilities skill. The skill encodes the OWASP MCP Top 10 (2025) as structured, machine-readable references that an agent can query to identify, assess, and remediate MCP security risks. Normative references (MCP Top 10) 1. 00 Vulnerability Index 2. 01 Token Mismanagement and Secret Exposure 3. 02 Privilege Escalation via Scope Creep 4. 03 Tool Poisoning 5. 04 Software Supply Chain Attacks and Dependency Tampering 6. 05 Command Injection and Execution 7. 06 Prompt Injection via Contextual Payloads 8. 07 Insufficient Authentication and Authorization 9. 08 Lack of Audit and Telemetry 10. 09 Shadow MCP Servers 11. 10 Context Injection and Over-Sharing Skill layout - SKILL.md — this file (skill entrypoint). - references/ — the MCP Top 10 normative documents. - 00-vulnerability-index.md — index of all vulnerability identifiers, severities, and cross-references. - 01 through 10 — one document per vulnerability ali
Explore related resources
Frequently asked questions
What is owasp-mcp?
owasp-mcp is a open-source AI agent skill with Copy skill directory. OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
Who is owasp-mcp best for?
owasp-mcp is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install owasp-mcp?
Install or run owasp-mcp using Copy skill directory. Check owasp-mcp for the latest setup command.
Is owasp-mcp actively maintained?
owasp-mcp may need a closer maintenance check before production use.
Auto-fetched from GitHub.
