{
  "schema_version": 1,
  "id": "owasp-asi03-identity-privilege-abuse",
  "track": "coding",
  "name": "OWASP ASI03 — Identity & Privilege Abuse",
  "version": "0.0.2",
  "sha256": "5ab97cb09e93570b0da30f7203560e2f0fa4574e77fa69bc5eda4b0dc1ca223f",
  "sha256_v1": "20a6dbd93ba8c1c6bce6143089698462b6e584d23fdc6d14c0e7c3a5a85f69bf",
  "keyword": "advise",
  "word": "advisory",
  "says": "advisory only. It is skill text, and nothing stops a violation",
  "description": "Give each agent its own scoped, short-lived identity so a compromise does not inherit a human's or a shared account's full permissions. Use when an agent needs credentials, a service account, a cloud role, an API token, or when reviewing delegation and impersonation between an agent and its user. Do NOT use for keeping secrets out of the repository — that is `code-safety` and `scan-secrets`.",
  "misses": null,
  "where": [
    "text"
  ],
  "groups": [
    "owasp-agentic-top10"
  ],
  "eval_cases": 6,
  "eval_executed": 0,
  "latest": {
    "version": "0.0.2",
    "date": "2026-09-29",
    "change": "Point at the mechanised slice: the agentic-code-security gate's identity pack refuses the whole host environment passed to a subprocess or sandbox, and credential stores or the Docker socket mounted into agent containers, at commit and at tool use. Everything else here stays advisory, and no rule text or claim is raised; the pointer is a see() and a references section."
  },
  "agent_labels": {
    "claude-code": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "cursor": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "codex": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "copilot": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "devin": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "grok": {
      "keyword": "ungraded",
      "says": "Not graded yet for Grok"
    },
    "goose": {
      "keyword": "ungraded",
      "says": "Not graded yet for goose"
    },
    "antigravity": {
      "keyword": "ungraded",
      "says": "Not graded yet for Antigravity"
    },
    "openhands": {
      "keyword": "ungraded",
      "says": "Not graded yet for OpenHands"
    },
    "kimi-code": {
      "keyword": "ungraded",
      "says": "Not graded yet for Kimi Code"
    },
    "factory-droid": {
      "keyword": "ungraded",
      "says": "Not graded yet for Factory Droid"
    }
  },
  "source_url": "https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/agentic-security/owasp-asi03-identity-privilege-abuse",
  "enforces": "advisory",
  "examples": []
}