Skip to content
Agentmart
Submit a tool

Alternatives to owasp-asi

owasp-asi is an agent skill by Tencent: OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. If it doesn't fit your setup, these 12 agent skills cover similar ground. They are ordered by how closely they match owasp-asi and by our rank, which weighs adoption, freshness and documentation; money never changes the order. pentest-blackboard leads the list (largest repository here (8,008 stars); active in the last 30 days). Each entry shows data reasons to switch, and you can open a side-by-side comparison with owasp-asi.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

You're replacing

owasp-asi

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

12 alternatives

Ordered by how closely each matches owasp-asi (shared product, category or stated alternative) and by rank.

  1. 1
    pentest-blackboard

    AIPentest

    CyberStrikeAI 项目黑板：跨会话 Fact 图（SQLite）+ upsert_project_fact/record_vulnerability 边渗透边记录节奏、关系边 links、confidence、与多代理协调落库。Use when managing project facts…

    • Largest repository here (8,008 stars)
    • Active in the last 30 days

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6Compare →

  2. 2
    pentest-agent-os

    AIPentest

    渗透测试Agent操作系统。把渗透抽象成状态空间搜索:不预设固定路径,以项目黑板 Fact 图 (upsert_project_fact)+漏洞记录沉淀认知,路径从已验证事实上涌现。覆盖全杀伤链攻击手法 (联网情报/Web/认证/服务端/源码/社工/后渗透/二进制/内网域/云/区块链/AI/无线/硬件)+0day+…

    • Largest repository here (8,008 stars)
    • Active in the last 30 days

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  3. 3
    cra-vulnerability-obligations

    Ansvar Systems AB

    Use when a user asks what the EU Cyber Resilience Act (CRA) means for their product, whether and when they must report a vulnerability or incident, or what a…

    • Active in the last 30 days
    • Open source (CC-BY-4.0)

    ★ 895Last active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  4. 4
    owasp-security

    agamm

    Reviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Applications (2026)…

    • Active in the last 30 days
    • Open source (MIT)

    ★ 397Last active Sep 25, 2026Claude Code, Claude apps, Codex, Cursor +6

  5. 5
    pentest-engagement

    transilienceai

    Run a professional penetration engagement OR a network vulnerability scan from a scope.

    • Open source (MIT)

    ★ 591Last active Jul 28, 2026Claude Code, Claude apps, Codex, Cursor +6

  6. 6
    cosmos-vulnerability-scanner

    trailofbits

    Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence.

    • Repository has 7.8K stars
    • Open source (CC-BY-SA-4.0)

    ★ 7.8KLast active Sep 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  7. 7
    cve-audit

    runxhq

    Audit exact npm dependency versions against OSV through Runx native HTTP and emit replay-verified evidence with no unverified findings.

    • Supports JavaScript

    ★ 104Last active Oct 18, 2026Claude Code, Claude apps, Codex, Cursor +6

  8. 8
    cve-poc-generator

    transilienceai

    CVE research, standalone PoC script and report generation.

    • Open source (MIT)

    ★ 591Last active Jul 26, 2026Claude Code, Claude apps, Codex, Cursor +6

  9. 9
    pentest-ai-llm-security

    jd-opensource

    AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.

    • Open source (Apache-2.0)

    ★ 315Last active Jul 2, 2026Claude Code, Claude apps, Codex, Cursor +6

  10. 10
    pentest-api-deep

    jd-opensource

    Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.

    • Open source (Apache-2.0)

    ★ 315Last active Jul 2, 2026Claude Code, Claude apps, Codex, Cursor +6

  11. 11
    owasp-review

    Archive228

    Security-review a diff against the OWASP Top 10.

    • Open source (MIT)

    ★ 755Last active Jun 29, 2026Claude Code, Claude apps, Codex, Cursor +6

  12. 12
    gpt56-reverse-pentest

    z91772524-ai

    GPT-5.6 全栈逆向+渗透融合 Skill（已并入 Code Sentinel）。 覆盖：通用/深度/脱壳/黑盒/JS/APK/Binary Diff 逆向；渗透/API/攻击链； 游戏/卡密/Pwn/IoT/恶意样本/EDR/LLM/供应链/Patch Diff/CTF 全速解题； Kali…

    • Supports Python

    ★ 77Last active Oct 10, 2026Claude Code, Claude apps, Codex, Cursor +6

Related