How do I install the LLM Vulnerabilities skill?

Run npx skillmds@latest add tomevault-io/llm-vulnerabilities in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is LLM Vulnerabilities safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with LLM Vulnerabilities?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is LLM Vulnerabilities free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published LLM Vulnerabilities?

tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.

LLM Vulnerabilities by tomevault-io

Name: LLM Vulnerabilities
Author: tomevault-io

LLM Vulnerabilities

OWASP Top 10 for LLM Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in large language model systems. Use when this capability is needed.

tomevault-io b0638c8 2 files · 2.8 KB Updated Sep 17, 2026

File contents

LLM Vulnerabilities — Skill Entry

This SKILL.md is the entrypoint for the LLM Vulnerabilities skill.

The skill encodes the OWASP Top 10 for LLM Applications (2025) as structured, machine-readable references that an agent can query to identify, assess, and remediate security risks in large language model systems.

Normative references (LLM Top 10)

00 Vulnerability Index
01 Prompt Injection
02 Sensitive Information Disclosure
03 Supply Chain
04 Data and Model Poisoning
05 Improper Output Handling
06 Excessive Agency
07 System Prompt Leakage
08 Vector and Embedding Weaknesses
09 Misinformation
10 Unbounded Consumption

Skill layout

SKILL.md — this file (skill entrypoint).
references/ — the LLM Top 10 normative documents.
- 00-vulnerability-index.md — master index of all vulnerability identifiers, categories, and cross-references.
- 01 through 10 — one document per vulnerability aligned with OWASP LLM Applications numbering.
assets/ — reusable format and constants blocks.
- constants/ — vulnerability catalog and category definitions.
  - constants-llm-catalog-v1.0.0.md
- formats/ — output contract examples.
  - format-vulnerability-assessment-v1.0.0.md
  - format-remediation-checklist-v1.0.0.md

Converted and distributed by TomeVault — claim your Tome and manage your conversions.

---name: llm-vulnerabilitiesdescription: OWASP Top 10 for LLM Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in large language model systems. Use when this capability is needed.---# LLM Vulnerabilities — Skill EntryThis `SKILL.md` is the **entrypoint** for the LLM Vulnerabilities skill.The skill encodes the **OWASP Top 10 for LLM Applications (2025)** as structured,machine-readable references that an agent can query to identify, assess, and remediatesecurity risks in large language model systems.## Normative references (LLM Top 10)1. [00 Vulnerability Index](references/00-vulnerability-index.md)2. [01 Prompt Injection](references/01-prompt-injection.md)3. [02 Sensitive Information Disclosure](references/02-sensitive-information-disclosure.md)4. [03 Supply Chain](references/03-supply-chain.md)5. [04 Data and Model Poisoning](references/04-data-and-model-poisoning.md)6. [05 Improper Output Handling](references/05-improper-output-handling.md)7. [06 Excessive Agency](references/06-excessive-agency.md)8. [07 System Prompt Leakage](references/07-system-prompt-leakage.md)9. [08 Vector and Embedding Weaknesses](references/08-vector-and-embedding-weaknesses.md)10. [09 Misinformation](references/09-misinformation.md)11. [10 Unbounded Consumption](references/10-unbounded-consumption.md)## Skill layout- `SKILL.md` — this file (skill entrypoint).- `references/` — the LLM Top 10 normative documents. - `00-vulnerability-index.md` — master index of all vulnerability identifiers, categories, and cross-references. - `01` through `10` — one document per vulnerability aligned with OWASP LLM Applications numbering.- `assets/` — reusable format and constants blocks. - `constants/` — vulnerability catalog and category definitions. - `constants-llm-catalog-v1.0.0.md` - `formats/` — output contract examples. - `format-vulnerability-assessment-v1.0.0.md` - `format-remediation-checklist-v1.0.0.md`---> Converted and distributed by [TomeVault](https://tomevault.io/claim/jasonthedeveloper) — claim your Tome and manage your conversions.

Frequently asked questions