The OWASP Agentic Skills Top 10 carries a merged v1 draft in public review

Sources: primary, discussion
Summary: The OWASP project page is banner-labeled as a public review of the merged v1 draft and carries an incident timeline running January through July 2026, so the project predates this date and the page states no opening date. It targets the skill layer of agent platforms rather than the model layer or the MCP tool layer, covering OpenClaw SKILL.md, Claude Code skill.json, Cursor and Codex manifest.json, and VS Code package.json. Proposed controls include a signed universal manifest with network.allow as a domain allowlist rather than a boolean, and default deny_write on SOUL.md, MEMORY.md, and AGENTS.md.
Why it matters: Skills are distributed as files with implicit filesystem and network reach, and a signed manifest with an explicit domain allowlist bounds that reach across platforms that today express it differently.
Follow-up: Track whether the v1 draft leaves public review and which platforms adopt the proposed manifest.