dotnet-agentic-security

Provide security guidance for .NET agentic applications with ASI and OWASP mappings.

Updated Apr 28, 2026
One-click install
npx skills add https://github.com/garrardkitchen/skills --skill dotnet-agentic-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dotnet-agentic-security
Source: https://github.com/garrardkitchen/skills/tree/main/dotnet-agentic-security
Command: npx skills add https://github.com/garrardkitchen/skills --skill dotnet-agentic-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Provide modular, security-prioritized guidance for designing, reviewing, and implementing secure .NET, ASP.NET Core, and Azure-hosted applications with agentic patterns. It aligns agentic guidance to ASI01 through ASI10 and maps to OWASP Top Ten Web Application Security Risks 2025, OWASP API Security Top 10 2023, and ASVS v5.0.0-aligned implementation guidance, while referencing Microsoft Learn guidance for secure coding, authentication, authorization, resilience, and observability.

Core Features & Use Cases

  • Modular, guidance-first approach that keeps critical security controls at the boundary, with on-demand loading of references and assets.
  • Aligns with ASI01–ASI10 agentic risks, OWASP Top Ten 2025, and ASVS v5.0.0, providing concrete mitigations, examples, and implementation patterns for .NET apps.
  • Suitable for secure API design, MCP server security, tenant isolation, Azure.Identity integration, secrets handling, and production-ready C# examples.

Quick Start

Ask for agentic security guidance for a .NET app and I will tailor ASI mappings and security controls.

Frequently Asked Questions about dotnet-agentic-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure agentic workflows in ASP.NET Core applications?

Secure agentic workflows in ASP.NET Core by keeping critical security controls at the boundary and mapping ASI01–ASI10 risks to concrete mitigations. This guidance enforces production-ready patterns for identity, authorization, secrets management, and observability with C# examples.

What security baselines should I follow for .NET agentic applications hosting MCP servers?

Security baselines for .NET agentic applications should align with OWASP Top Ten 2025, API Security Top 10 2023, and ASVS v5.0.0. This guidance maps those standards to practical mitigations for MCP server security, tenant isolation, and Azure.Identity integration.

How do I map OWASP API Security Top 10 2023 risks to mitigations in Azure-hosted .NET apps?

Map OWASP API Security Top 10 2023 risks in Azure-hosted .NET apps by applying modular, security-prioritized guidance that references Microsoft Learn for secure coding, authentication, and authorization. It provides concrete C# implementation patterns for each mapped risk.

Can I use this security guidance for tenant isolation in agentic .NET workflows?

Yes, you can use this guidance for tenant isolation in agentic .NET workflows. It provides modular, security-focused guidance specifically covering tenant isolation, MCP server security, and Azure.Identity integration for multi-tenant agentic applications.

What's the best way to implement production-ready identity and secrets management in .NET agentic apps?

The best way to implement production-ready identity and secrets management in .NET agentic apps is following ASVS v5.0.0-aligned patterns. This guidance enforces production-ready patterns with identity, authorization, secrets handling, and observability supported by C# examples.