How do I install the Owasp Cicd skill?

Run npx skillmds@latest add microsoft/owasp-cicd in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Owasp Cicd safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Owasp Cicd?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Owasp Cicd free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under CC-BY-SA-4.

Who published Owasp Cicd?

Microsoft (@microsoft) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Owasp Cicd by microsoft — Agent Skill

Name: Owasp Cicd
Rating: 4.2 (5 reviews)
Author: Microsoft

File contents

OWASP® CI/CD Top 10 — Skill Entry

This SKILL.md is the entrypoint for the OWASP CI/CD Top 10 skill.

The skill encodes the OWASP Top 10 CI/CD Security Risks as structured, machine-readable references that an agent can query to identify, assess, and remediate CI/CD pipeline security risks.

Normative references (CI/CD Top 10)

00 Vulnerability Index
01 Insufficient Flow Control Mechanisms
02 Inadequate Identity and Access Management
03 Dependency Chain Abuse
04 Poisoned Pipeline Execution
05 Insufficient PBAC
06 Insufficient Credential Hygiene
07 Insecure System Configuration
08 Ungoverned Usage of 3rd Party Services
09 Improper Artifact Integrity Validation
10 Insufficient Logging and Visibility

Skill layout

SKILL.md — this file (skill entrypoint).
references/ — the CI/CD Top 10 normative documents.
- 00-vulnerability-index.md — index of all vulnerability identifiers, categories, and cross-references.
- 01 through 10 — one document per vulnerability aligned with OWASP CI/CD Security numbering.

Third-Party Attribution

Copyright © OWASP Foundation. OWASP® Top 10 CI/CD Security Risks content is derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). Source: https://owasp.org/www-project-top-10-ci-cd-security-risks/ Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.

---name: owasp-cicddescription: OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.license: CC-BY-SA-4.0--- # OWASP® CI/CD Top 10 — Skill Entry This `SKILL.md` is the **entrypoint** for the OWASP CI/CD Top 10 skill. The skill encodes the **OWASP Top 10 CI/CD Security Risks** as structured, machine-readable references that an agent can query to identify, assess, and remediate CI/CD pipeline security risks. ## Normative references (CI/CD Top 10) 1. [00 Vulnerability Index](references/00-vulnerability-index.md) 2. [01 Insufficient Flow Control Mechanisms](references/01-insufficient-flow-control-mechanisms.md) 3. [02 Inadequate Identity and Access Management](references/02-inadequate-identity-access-management.md) 4. [03 Dependency Chain Abuse](references/03-dependency-chain-abuse.md) 5. [04 Poisoned Pipeline Execution](references/04-poisoned-pipeline-execution.md) 6. [05 Insufficient PBAC](references/05-insufficient-pbac.md) 7. [06 Insufficient Credential Hygiene](references/06-insufficient-credential-hygiene.md) 8. [07 Insecure System Configuration](references/07-insecure-system-configuration.md) 9. [08 Ungoverned Usage of 3rd Party Services](references/08-ungoverned-usage-of-3rd-party-services.md) 10. [09 Improper Artifact Integrity Validation](references/09-improper-artifact-integrity-validation.md) 11. [10 Insufficient Logging and Visibility](references/10-insufficient-logging-visibility.md) ## Skill layout * `SKILL.md` — this file (skill entrypoint). * `references/` — the CI/CD Top 10 normative documents. * `00-vulnerability-index.md` — index of all vulnerability identifiers, categories, and cross-references. * `01` through `10` — one document per vulnerability aligned with OWASP CI/CD Security numbering. ## Third-Party Attribution Copyright © OWASP Foundation. OWASP® Top 10 CI/CD Security Risks content is derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0 (<https://creativecommons.org/licenses/by-sa/4.0/>). Source: <https://owasp.org/www-project-top-10-ci-cd-security-risks/> Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.

Frequently asked questions

Owasp Cicd