llm-security
llm-security is an agent skill published by semgrep, listed under building agents. It lives in the semgrep/skills repository, which has 332 GitHub stars and is licensed under NOASSERTION; we last read it on 2026-09-16.
Provides security guidelines based on the OWASP Top 10 for LLM 2025, to be used when building LLM applications, reviewing AI security, implementing RAG systems, or discussing LLM vulnerabilities such as 'prompt injection'. Requires no specific credentials.
Install
skills is a generic installer for any repository of Claude agent skills -- it reads semgrep/skills’s own structure rather than assuming one, the same way this page reads the skill’s own SKILL.md rather than assuming a format.
npx skills add semgrep/skills
What it connects to
Unverified means a mention in the skill’s own description, not a citation. A wrong claim here costs nothing to correct and nothing to trust yet.
Maintenance
Security guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or asking about LLM vulnerabilities like 'prompt injection' or 'check LLM security'. IMPORTANT: Always consult this skill when building chatbots, AI agents, RAG pipelines, tool-using LLMs, agentic systems, or any application that calls an LLM API (OpenAI, Anthropic, Gemini, etc.) — even if the user doesn't explicitly mention security. Also use when users import 'openai', 'anthropic', 'langchain', 'llamaindex', or similar LLM libraries.
llm-security compared with similar skills
| Skill | Publisher | What it does | Repo stars | Last update |
|---|---|---|---|---|
| llm-security (this page) | semgrep | Security guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, revi… | 332 | 2026-07-28 |
| claude-handoff | mattpocock | Hand the current conversation off to a fresh background agent that picks up the work immediately. | 303,549 | 2026-10-22 |
| context-engineering | addyosmani | Optimizes agent context setup. Use when starting a new session, when agent output quality degrades, when swit… | 110,611 | 2026-10-13 |
| using-agent-skills | addyosmani | Discovers and invokes agent skills. Use when starting a session, or when you need to decide which skill or wo… | 110,611 | 2026-10-13 |
| agent-platform-inference | Connects to and performs inference with Google Cloud Agent Platform GenAI models, including First-Party Gemin… | 21,580 | 2026-10-25 | |
| agent-platform-skill-registry | Interact with the Gemini Enterprise Agent Platform Skill Registry to create and search for available skills.… | 21,580 | 2026-10-25 | |
| gemini-agents-api | Manages custom Agent resources on Gemini Enterprise Agent Platform. Use when the user wants to programmatical… | 21,580 | 2026-10-25 |
Skills from the same repository first, then others for this job by repository stars. Figures are from each repository when we last read it.
Common questions about llm-security
- What does llm-security do?
- Provides security guidelines based on the OWASP Top 10 for LLM 2025, to be used when building LLM applications, reviewing AI security, implementing RAG systems, or discussing LLM vulnerabilities such as 'prompt injection'. Requires no specific credentials.
- How do I install llm-security?
- Run npx skills add semgrep/skills. The skills installer reads the repository’s own structure, so it works for any repository of agent skills.
- Who publishes llm-security?
- semgrep.
- Is llm-security maintained, and what licence does it use?
- Its repository has 332 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-07-28. The repository declares the NOASSERTION licence.
More agent skills for building agents
- python-sdkby 101-skills
- widgets-uiby 101-skills
- context-engineeringby addyosmani
- using-agent-skillsby addyosmani
- anti-detect-browserby antibrow
- browser-mcp-agentby antibrow