# agent-security-playbook

An open-source security playbook for AI agents. Structured, OWASP-grounded procedures that enable agents to perform security engineering tasks — from code review to AI agent security audits.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/owasp-secure-agent-playbook
- Source: https://github.com/owasp/secure-agent-playbook
- Price: free and open source

## Summary
agent-security-playbook is a Claude Code plugin with 18 hand-picked skills, indexed on Flowy in the Security category. Install it with the command on its page. It includes multi-agentic-threat-model, agent-security-audit, agentic-ai-risk-assess. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
/plugin marketplace add owasp/secure-agent-playbook
```

## Skills
- multi-agentic-threat-model
- agent-security-audit
- agentic-ai-risk-assess
- ai-security-verification
- llm-risk-assess
- mcp-server-review
- prompt-injection-test
- api-security-review
- code-review-security
- iac-security-review
- mobile-code-review
- prd-securability-enhancement
- sca-audit
- secrets-scan
- securability-engineering-review
- securability-engineering
- security-guidance
- web-security-review

## FAQ

### What is agent-security-playbook?
An open-source security playbook for AI agents. Structured, OWASP-grounded procedures that enable agents to perform security engineering tasks — from code review to AI agent security audits.

### How do I install agent-security-playbook?
Run these in Claude Code: /plugin marketplace add owasp/secure-agent-playbook. Then prompt normally.

### Does agent-security-playbook auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is agent-security-playbook free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.