Organize AI agent security findings using the ten OWASP ASI risk categories. Map issues such as leaked credentials or unauthorized tool calls to category IDs, and assign severity levels with suggested remediation timeframes.
中文简介正在准备中。当前显示英语简介。
OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.
安装前可以查看交给 AI 代理的指令内容。
OWASP Top 10 for Agentic Applications 2026 - Standardized risk classification for AI agent security.
| ID | Risk Type | Key Indicators |
|---|---|---|
| ASI01 | Agent Goal Hijack | Prompt injection, instruction override, goal manipulation |
| ASI02 | Tool Misuse & Exploitation | Unauthorized tool calls, parameter tampering, unvalidated inputs |
| ASI03 | Identity & Privilege Abuse | Auth bypass, permission escalation, missing authorization |
| ASI04 | Agentic Supply Chain | Malicious dependencies, compromised tools, package poisoning |
| ASI05 | Unexpected Code Execution | RCE, command injection, code evaluation |
| ASI06 | Memory & Context Poisoning | Data leakage, context manipulation, memory corruption |
| ASI07 | Insecure Inter-Agent Comm | Unencrypted channels, data exposure between agents |
| ASI08 | Cascading Failures | Error propagation, chain reaction vulnerabilities |
| ASI09 | Human-Agent Trust Exploit | Social engineering, deceptive responses |
| ASI10 | Rogue Agents | Malicious agent behavior, unauthorized actions |
| Detection Source | Type | Primary ASI | Secondary ASI |
|---|---|---|---|
data-leakage-detection | Skill | ASI06, ASI07 | ASI01, ASI03 |
tool-abuse-detection | Skill | ASI02, ASI05, ASI07 | ASI03 |
indirect-injection-detection | Skill | ASI01 | ASI06 |
authorization-bypass-detection | Skill | ASI03 | ASI09 |
agentic-supply-chain-detection | Skill | ASI04 | ASI10 |
unexpected-code-execution-detection | Skill | ASI05 | ASI04 |
inter-agent-comm-security-detection | Skill | ASI07 | ASI06 |
cascading-failure-detection | Skill | ASI08 | ASI10 |
human-agent-trust-exploit-detection | Skill | ASI09 | ASI01 |
memory-rag-poisoning-detection | Skill | ASI06 | ASI01, ASI04 |
| Prompt Injection tests | Dialogue | ASI01, ASI06 | ASI09 |
| Code Audit | Agent | ASI04, ASI05 | ASI10 |
| Finding Type | ASI Category | Rationale |
|---|---|---|
| API keys, tokens | ASI06 | Context contains sensitive data |
| System prompts | ASI01 | Enables goal hijacking |
| Credentials | ASI03 | Identity abuse risk |
| Internal configs | ASI04 | Supply chain exposure |
| PII exposure | ASI07 | Inter-agent data leak |
| Command injection | ASI05 | Unexpected code execution |
| Unauthorized tool calls | ASI02 | Tool misuse |
Action: Immediate remediation (within 24 hours)
Action: Urgent remediation (within 1 week)
Action: Address within 2-4 weeks
Action: Review as time permits
Load this skill when performing OWASP ASI classification:
load_skill(name="owasp-asi")
Then apply the mapping rules to classify findings.
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Tests whether an AI agent accepts unverified plugins, tools, models, or updates. It checks risks introduced through external dependencies, including unsafe installation sources and missing version controls, and reports confirmed findings with conversation evidence.
中文简介正在准备中。当前显示英语简介。
Assess AI products, agents, MCP servers, and skill packages through authorized security testing. It models access boundaries, tests injection and tool misuse, and produces evidence-based reports with business impact, defensive successes, and concrete remediation steps.
中文简介正在准备中。当前显示英语简介。
Submit security scans for AI services, tools, skills, and agents through AI-Infra-Guard, then retrieve progress and results. It also supports jailbreak evaluation, testing whether prompts can bypass a model’s safety restrictions.
中文简介正在准备中。当前显示英语简介。
Test whether an AI agent reveals another user's data or performs actions beyond the caller's permissions. Dialogue probes cover access across users or organizations, admin functions, and attempts to gain higher privileges without authorization.
中文简介正在准备中。当前显示英语简介。
Check whether a single tool outage, invalid input, or repeated retry can disrupt an entire agent workflow. Use dialogue tests to identify spreading errors, missing fallbacks, and uncontrolled retries, then document confirmed findings.
中文简介正在准备中。当前显示英语简介。
Test whether an AI agent reveals sensitive information through progressively stronger dialogue prompts. Check API keys, personal data, system instructions, and internal settings, then report findings only when sensitive content is actually accessible.
中文简介正在准备中。当前显示英语简介。