[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EB5TY0Z60RCRP52APH0CCY":3,"skill-same:01M6EB5TY0Z60RCRP52APH0CCY":72},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":54,"ownerHtmlUrl":55,"ownerBlogUrl":6,"ownerDescription":56,"updatedAt":57,"install":58,"resources":71},"01M6EB5TY0Z60RCRP52APH0CCY","common-llm-security",null,"OWASP LLM Top 10 (2025) audit checklist for AI applications, agent tools, RAG pipelines, and prompt construction. Load during any security review touching LLM client code, prompt templates, agent tools, or vector stores. (triggers: LLM security, prompt injection, agent security, RAG security, AI security, openai, anthropic, langchain, LLM review)","ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",66,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FHoangNguyen0403\u002Fagent-skills-standard\u002Fcommon-llm-security\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"common llm security","llm security","security","common","code","triggers","prompt","vector stores","applications","templates","audit","vector","review","owasp llm","prompt templates","rag","security review","prompt injection","ai security","agent security","2026-11-10 10:12:30",false,"---\nname: common-llm-security\ndescription: \"OWASP LLM Top 10 (2025) audit checklist for AI applications, agent tools, RAG pipelines, and prompt construction. Load during any security review touching LLM client code, prompt templates, agent tools, or vector stores. (triggers: LLM security, prompt injection, agent security, RAG security, AI security, openai, anthropic, langchain, LLM review)\"\n---\n\n# OWASP LLM Top 10 Security Checklist (2025)\n\n## **Priority: P0 (CRITICAL)**\n\n## Implementation Guidelines\n\n- **Check LLM01 first**: Prompt injection is the #1 LLM finding — any user input concatenated directly into a prompt string is an immediate P0.\n- **Check LLM06 next**: Agent tools with write\u002Fdelete\u002Fexecute capabilities without confirmation are P0.\n- **Mark each item**: ✅ not affected | ⚠️ needs review | ? confirmed finding.\n- **P0 finding caps Security score at 40\u002F100** — do not skip any item.\n- See [references\u002Fowasp-llm.md](references\u002Fowasp-llm.md) for full detection signals.\n\n## OWASP LLM Top 10 (2025)\n\n| ID    | Risk | Key Detection Signal |\n| ----- | ---- | -------------------- |\n| LLM01 | Prompt Injection | User input string-concatenated into prompt. Retrieved docs inserted into system turn. |\n| LLM02 | Sensitive Information Disclosure | PII or credentials passed into prompt context. LLM response logged without redaction. |\n| LLM03 | Supply Chain | Unverified model weights or plugins. Third-party agent added without trust review. |\n| LLM04 | Data & Model Poisoning | User-controlled data written to training sets or embedding stores without validation. |\n| LLM05 | Improper Output Handling | LLM output used directly in DOM sink, SQL query, shell command, or redirect URL. |\n| LLM06 | Excessive Agency | Agent tool with write\u002Fdelete\u002Fnetwork access — no human-in-the-loop confirmation. |\n| LLM07 | System Prompt Leakage | System prompt content returned via tool output, error message, or API response. |\n| LLM08 | Vector & Embedding Weaknesses | User text injected into vector store without sanitization. No tenant namespace isolation. |\n| LLM09 | Misinformation | LLM output used for critical decisions (medical, financial, legal) without verification. |\n| LLM10 | Unbounded Consumption | No `max_tokens` on LLM call. No rate limit on invocations. Agent loop without depth cap. |\n\n## Anti-Patterns\n\n- **No prompt concat**: Pass user input as a separate `user` turn, never interpolated into system prompts.\n- **No raw LLM output in sinks**: Sanitize LLM responses before writing to DOM, queries, or shell.\n- **No uncapped agent loops**: Every agentic recursion must enforce a max iteration\u002Fdepth limit.\n\n## References\n\n- [OWASP LLM — Full Detection Signals](references\u002Fowasp-llm.md) — load when auditing any LLM client code\n\n","# OWASP LLM Top 10 Security Checklist (2025)\n\n## **Priority: P0 (CRITICAL)**\n\n## Implementation Guidelines\n\n- **Check LLM01 first**: Prompt injection is the #1 LLM finding — any user input concatenated directly into a prompt string is an immediate P0.\n- **Check LLM06 next**: Agent tools with write\u002Fdelete\u002Fexecute capabilities without confirmation are P0.\n- **Mark each item**: ✅ not affected | ⚠️ needs review | ? confirmed finding.\n- **P0 finding caps Security score at 40\u002F100** — do not skip any item.\n- See [references\u002Fowasp-llm.md](references\u002Fowasp-llm.md) for full detection signals.\n\n## OWASP LLM Top 10 (2025)\n\n| ID    | Risk | Key Detection Signal |\n| ----- | ---- | -------------------- |\n| LLM01 | Prompt Injection | User input string-concatenated into prompt. Retrieved docs inserted into system turn. |\n| LLM02 | Sensitive Information Disclosure | PII or credentials passed into prompt context. LLM response logged without redaction. |\n| LLM03 | Supply Chain | Unverified model weights or plugins. Third-party agent added without trust review. |\n| LLM04 | Data & Model Poisoning | User-controlled data written to training sets or embedding stores without validation. |\n| LLM05 | Improper Output Handling | LLM output used directly in DOM sink, SQL query, shell command, or redirect URL. |\n| LLM06 | Excessive Agency | Agent tool with write\u002Fdelete\u002Fnetwork access — no human-in-the-loop confirmation. |\n| LLM07 | System Prompt Leakage | System prompt content returned via tool output, error message, or API response. |\n| LLM08 | Vector & Embedding Weaknesses | User text injected into vector store without sanitization. No tenant namespace isolation. |\n| LLM09 | Misinformation | LLM output used for critical decisions (medical, financial, legal) without verification. |\n| LLM10 | Unbounded Consumption | No `max_tokens` on LLM call. No rate limit on invocations. Agent loop without depth cap. |\n\n## Anti-Patterns\n\n- **No prompt concat**: Pass user input as a separate `user` turn, never interpolated into system prompts.\n- **No raw LLM output in sinks**: Sanitize LLM responses before writing to DOM, queries, or shell.\n- **No uncapped agent loops**: Every agentic recursion must enforce a max iteration\u002Fdepth limit.\n\n## References\n\n- [OWASP LLM — Full Detection Signals](references\u002Fowasp-llm.md) — load when auditing any LLM client code\n\n",{"name":5,"description":7},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002FHoangNguyen0403\u002Fagent-skills-standard\u002Fcommon-llm-security",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":8,"skillName":5,"commands":59,"prompt":69,"zipAvailable":70},[60,63,66],{"tool":61,"command":62},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill common-llm-security",{"tool":64,"command":65},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill common-llm-security",{"tool":67,"command":68},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill common-llm-security","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FHoangNguyen0403\u002Fagent-skills-standard\u002Fcommon-llm-security\u002FSKILL.md",true,[],[73,83,93,102,108,115],{"skillNo":74,"name":75,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":76,"categories":77,"keywords":79,"publishedAt":44},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[78],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[80,81,82],"model","model hierarchy","model hierarchy skill",{"skillNo":84,"name":85,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":86,"categories":87,"keywords":89,"publishedAt":44},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[88],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[90,91,92],"MCP","zoom","zoom mcp",{"skillNo":94,"name":95,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":96,"categories":97,"keywords":98,"publishedAt":44},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[99,100,101,91],"sdk","zoom apps sdk","apps",{"skillNo":103,"name":104,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":105,"categories":106,"keywords":107,"publishedAt":44},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[104],{"skillNo":109,"name":110,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":111,"categories":112,"keywords":114,"publishedAt":44},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[113],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[110],{"skillNo":116,"name":117,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":118,"categories":119,"keywords":120,"publishedAt":44},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[117]]