Agent Skills Threat Taxonomy

Agent Skills Threat Taxonomy

Overview

Skill Scanner aligns threat labels to Cisco's AI Security Framework taxonomy.

• Authoritative taxonomy source: Cisco AI Security Framework
• Public framework write-up: Cisco AI Security Framework paper
• In-repo canonical code list: skill_scanner/threats/cisco_ai_taxonomy.py

The full framework is broader than skill scanning. Skill Scanner maps a focused subset relevant to agent skill packages and their executable artifacts.

Full Framework vs Scanner Coverage

The Cisco framework defines 19 attacker objectives and a larger set of techniques/sub-techniques. Skill Scanner currently uses a subset of those codes for agent-skill risk categories.

Scanner Threat-to-Taxonomy Mapping

Where Mappings Live

• Mapping definitions: skill_scanner/threats/threats.py
• Full Cisco code/name dictionary: skill_scanner/threats/cisco_ai_taxonomy.py
• Validation tests: tests/test_taxonomy_validation.py

Custom Taxonomy Support

Skill Scanner can load a custom taxonomy profile at runtime.

Set:

export SKILL_SCANNER_TAXONOMY_PATH=/path/to/taxonomy.json

Supported taxonomy file formats:

1. Full framework format (the OB-* -> ai_tech -> ai_subtech JSON shape).
2. Flattened format:

{
  "AITECH_TAXONOMY": {
    "AITech-1.1": "Direct Prompt Injection"
  },
  "AISUBTECH_TAXONOMY": {
    "AISubtech-1.1.1": "Instruction Manipulation (Direct Prompt Injection)"
  }
}

Optional flattened mapping keys:

• AITECH_FRAMEWORK_MAPPINGS
• AISUBTECH_FRAMEWORK_MAPPINGS

These store cross-framework links (OWASP, MITRE ATLAS/ATT&CK, NIST AML, Cisco MDL) as string arrays by code.

CLI Overrides

For one-off runs, prefer CLI flags over environment variables:

skill-scanner scan /path/to/skill \
  --taxonomy /path/to/taxonomy.json \
  --threat-mapping /path/to/threat_mapping.json

--taxonomy accepts JSON or YAML. --threat-mapping accepts JSON.

If you also need custom scanner threat mappings, set:

export SKILL_SCANNER_THREAT_MAPPING_PATH=/path/to/threat_mapping.json

SKILL_SCANNER_THREAT_MAPPING_PATH supports these top-level keys:

• llm_threats
• yara_threats
• behavioral_threats
• aitech_to_category

Each *_threats value is merged by threat name and can override aitech, aisubtech, severity, or labels.

Cross-Framework Mapping Access

Skill Scanner now exposes framework mapping helpers from skill_scanner.threats:

• get_aitech_framework_mappings(code)
• get_aisubtech_framework_mappings(code)
• get_framework_mappings(aitech_code=..., aisubtech_code=...)

At the threat level, use:

• ThreatMapping.get_framework_mappings_for_threat(analyzer, threat_name)

Built-in taxonomy ships with canonical code/name coverage. Cross-framework mapping lists populate when the taxonomy source includes mappings metadata (full OB-* export or flattened *_FRAMEWORK_MAPPINGS fields).

Maintenance Policy

When Cisco updates the framework:

1. Update built-in taxonomy data in skill_scanner/threats/cisco_ai_taxonomy.py (or point SKILL_SCANNER_TAXONOMY_PATH to an exported framework file)
2. Update skill_scanner/threats/threats.py mappings where needed
3. Run taxonomy tests:
   • uv run pytest tests/test_taxonomy_validation.py tests/test_threats.py -q
4. Refresh this document if scanner coverage changes

Notes

• AITech-99.9 / AISubtech-99.9.9 are internal placeholders for unknown/unclassified threats in fallback paths; they are not Cisco framework codes.