{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"AI Security Ops","title":"OWASP Agentic Top 10 [Part 1] | Episode 70","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/31b76eee\"></iframe>","width":"100%","height":180,"duration":1403,"description":"In this episode of BHIS Presents: AI Security Ops, the team breaks down the first five risks in the OWASP Agentic Skills Top 10 (Part 1).\nAgentic skills can give AI systems reusable instructions, workflows, and capabilities — but they also introduce a new attack surface. A skill may look like a simple markdown file, yet the agent following those instructions could have access to your filesystem, credentials, network, shell, or other sensitive resources.\nWe dig into:\n- AST01: Malicious Skills\n- AST02: Supply Chain Compromise\n- AST03: Overprivileged Skills\n- AST04: Insecure Metadata\n- AST05: Untrusted External Instructions\n- Why skills should be treated more like software than configuration\n- How excessive permissions increase an agent’s blast radius\n- Why external content creates indirect prompt injection risks\n- How isolation, least privilege, and trusted sources can reduce risk\nThe takeaway: “just markdown” isn’t necessarily harmless when an AI agent can act on what it reads.\nThis is Part 1 of our look at the OWASP Agentic Skills Top 10, covering AST01 through AST05.\n—\nLearn more about Black Hills Information Security:\nhttps://www.blackhillsinfosec.com/\nCheck out Antisyphon Training:\nhttps://www.antisyphontraining.com/\n\nBrought to you by:\nBlack Hills Information Security \nhttps://www.blackhillsinfosec.com\n\n☯️ Introducing BHIS Fusion Penetration Testing\nhttps://www.blackhillsinfosec.com/fusion-penetration-testing/\nAntisyphon Training\nhttps://www.antisyphontraining.com/\n\nActive Countermeasures\nhttps://www.activecountermeasures.com\n\nWild West Hackin Fest\nhttps://wildwesthackinfest.com\n🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits\nhttps://poweredbybhis.com","thumbnail_url":"https://img.transistorcdn.com/mN9_Xu9UJwoaajIvIvLd-Yygv-Vh_nJwEDItjPY09kA/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8zYjBm/MzE1MWI2YmE4ZGJh/MDQ3MmJkMTkxZGNl/MjBjNS5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}