owasp-llm-security

Assess LLM-integrated systems against the OWASP Top 10 for LLM Applications.

2|1|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/bigeasyfreeman/adlc --skill owasp-llm-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: owasp-llm-security
Source: https://github.com/bigeasyfreeman/adlc/tree/main/skills/llm-security
Command: npx skills add https://github.com/bigeasyfreeman/adlc --skill owasp-llm-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires security_lib, ai_framework, owasp_checklist, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill assesses the security of LLM-integrated systems against the OWASP Top 10 for LLM Applications (v2.0, 2025), providing a detailed report on potential threats such as prompt injection, output handling, and agency boundaries.

Core Features & Use Cases

  • Vulnerability Assessment: Evaluates systems for vulnerabilities against OWASP LLM-specific security categories.
  • Detailed Report: Provides a comprehensive report on the findings, including risks, vectors, mitigations, and blocking advisory findings.
  • Use Case: Utilize this Skill before deploying LLM applications to ensure that potential security threats are identified and mitigated.

Quick Start

Run the security assessment on the LLM-integrated system using the command 'owasp-llm-security run-assessment --task_spec "YourTaskSpec" --repo_map "YourCodebaseOutput"'

Frequently Asked Questions about owasp-llm-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assess LLM security vulnerabilities before deploying my application?

Assess LLM security vulnerabilities by evaluating your system against the OWASP Top 10 for LLM Applications. This Skill identifies potential risks from prompt injection, output handling, and agency boundaries, providing a detailed report on threats and mitigations.

What is the OWASP Top 10 for LLM Applications and how does it handle prompt injection risks?

The OWASP Top 10 for LLM Applications is a security framework identifying vulnerabilities in AI systems. This Skill handles prompt injection risks by evaluating system safety, secure prompts, and proper LLM operation within constrained and vetted contexts.

How do I run a security assessment on my LLM-integrated system using a task spec and repo map?

Run a security assessment on your LLM-integrated system using the command 'owasp-llm-security run-assessment --task_spec "YourTaskSpec" --repo_map "YourCodebaseOutput"'. This evaluates your codebase against OWASP LLM security categories.

Does this security assessment check agency boundaries and output handling in LLM systems?

Yes, this security assessment checks agency boundaries and output handling in LLM systems. It focuses on identifying potential risks in these areas to ensure system safety and proper LLM operation within constrained contexts.

What is included in the detailed report for OWASP LLM security findings?

The detailed report for OWASP LLM security findings includes identified risks, attack vectors, mitigations, and blocking advisory findings. It provides a comprehensive overview of vulnerabilities to address before deploying LLM applications.

Do I need the security_lib and ai_framework dependencies to perform an LLM vulnerability assessment?

Yes, you need the security_lib, ai_framework, and owasp_checklist dependencies to perform an LLM vulnerability assessment. These components support the evaluation of LLM-integrated systems against OWASP security categories.