OWASP Agentic Top 10 [Part 2] | Episode 72

In this episode of BHIS Presents: AI Security Ops, the team continues its breakdown of the OWASP Agentic Skills Top 10, covering risks six through ten. Agentic skills may look like simple instructions, but they operate inside AI systems with access to tools, files, networks, and other resources. So what happens when those skills aren’t isolated, verified, monitored, or governed? We dig into: - AST06: Weak Isolation - AST07: Update Drift - AST08: Poor Scanning - AST09: No Governance - AST10: Cross-Platform Reuse - Why sandboxing the agent isn’t the same as isolating individual skills - The security tradeoffs between automatic updates and outdated skills - Why traditional scanners struggle with malicious instructions written in plain English - The importance of maintaining an inventory of agentic skills - How security controls can disappear when skills move between platforms The takeaway: securing agentic skills requires more than checking them once before installation. Organizations need visibility into what skills are running, what they can access, how they change, and whether their security controls survive across environments. OWASPAgenticSkils-Part2.docx This is Part 2 of our look at the OWASP Agentic Skills Top 10, covering AST06 through AST10. Part 1 can be found here #AISecurity #CyberSecurity #AgenticAI #AIAgents #OWASP #LLMSecurity #InfoSec #BHIS #Antisyphon (00:00) - Intro: OWASP Agentic Skills Top 10, Part 2 (01:41) - What Is an Agentic Skill? (03:33) - AST06: Weak Isolation (08:16) - AST07: Update Drift (11:58) - AST08: Poor Scanning (14:43) - AST09: No Governance (19:49) - AST10: Cross-Platform Reuse (26:40) - Final Thoughts and Closing Click here to watch this episode on YouTube. Creators & Guests Bronwen Aker - Host Brian Fehrman - Host Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testing https://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.com Click here to view the episode transcript.