Login
microsoft/hve-coreCC-BY-SA-4.012 files

Owasp Top 10

OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.

Use this skillView repositoryView on skills.sh
Specification
Skill ID
microsoft/hve-core/owasp-top-10
Publisher
microsoft
Repository
hve-core
Installs
0
Files
12
License
CC-BY-SA-4.0
Synced
Sep 23, 2026
How to use it

Open any RiverX project, open the Skills panel in the chat, and search for this identifier. The files are fetched from the source repository at install time.

microsoft/hve-core/owasp-top-10Installs these files
  • SKILL.md
  • references/00-vulnerability-index.md
  • references/01-broken-access-control.md
  • references/02-security-misconfiguration.md
  • references/03-software-supply-chain-failures.md
  • references/04-cryptographic-failures.md
  • references/05-injection.md
  • references/06-insecure-design.md
  • references/07-authentication-failures.md
  • references/08-software-data-integrity-failures.md
  • references/09-security-logging-alerting-failures.md
  • references/10-mishandling-exceptional-conditions.md

What this skill tells the agent

OWASP® Top 10 — Skill Entry

This SKILL.md is the entrypoint for the OWASP Top 10 skill.

The skill encodes the OWASP Top 10 for Web Applications (2025) as structured, machine-readable references that an agent can query to identify, assess, and remediate web application security risks.

Normative references (Web Top 10)

  1. 00 Vulnerability Index
  2. 01 Broken Access Control
  3. 02 Security Misconfiguration
  4. 03 Software Supply Chain Failures
  5. 04 Cryptographic Failures
  6. 05 Injection
  7. 06 Insecure Design
  8. 07 Authentication Failures
  9. 08 Software or Data Integrity Failures
  10. 09 Security Logging and Alerting Failures
  11. 10 Mishandling of Exceptional Conditions

Skill layout

  • SKILL.md — this file (skill entrypoint).
  • references/ — the Web Top 10 normative documents.
  • 00-vulnerability-index.md — index of all vulnerability identifiers, categories, and cross-references.
  • 01 through 10 — one document per vulnerability aligned with OWASP Web Application Security numbering.

Third-Party Attribution

Copyright © OWASP Foundation. OWASP® Top 10 (2025) content is derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0 (<https://creativecommons.org/licenses/by-sa/4.0/>). Source: <https://owasp.org/Top10/2025/> Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.

More from microsoft

microsoft/hve-core

Powerpoint

PowerPoint slide deck generation and management using python-pptx with YAML-driven content and styling

microsoft/azure-skills

Azure Cost

Azure cost management: query costs, forecast spending, optimize to reduce waste. WHEN: \"Azure costs\", \"Azure bill\", \"cost breakdown\", \"how much am I spending\", \"forecast spending\", \"optimize costs\", \"reduce spending\", \"orphaned resources\", \"rightsize VMs\", \"cost spike\", \"reduce storage costs\", \"AKS cost\". DO NOT USE FOR: deploying resources, provisioning, diagnostics, or security audits.

microsoft/azure-skills

Microsoft Foundry

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: foundry, azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent create, create agent, update agent, add tool to agent, invoke agent, agent.yaml, agent insights, pull agent insights, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, prompt optimizer, optimize agent instructions, Agent Optimizer scaffold, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure-prepare).

Use this skill in a project

Open any RiverX project, search the Skills panel for microsoft/hve-core/owasp-top-10, and install it in one click.

Use this skill