{
  "schema_version": 1,
  "id": "owasp-asi04-agentic-supply-chain",
  "track": "coding",
  "name": "OWASP ASI04 — Agentic Supply Chain Vulnerabilities",
  "version": "0.0.3",
  "sha256": "635064ee4fed5520bbc3bd61b01ad04a236ba8627807490448bac7737305f67b",
  "sha256_v1": "08193a0f8a80715914783d7767b14a743ee26436b44424e9e3d882c12e596e17",
  "keyword": "advise",
  "word": "advisory",
  "says": "advisory only. It is skill text, and nothing stops a violation",
  "description": "Verify agent components before loading them, and keep verifying, because runtime tool discovery changes the supply chain after deployment. Use when adding an MCP server, agent framework, plugin, tool registry, or model artifact, and when reviewing what an agent may pull at runtime. Do NOT use for ordinary application dependencies already covered by `verify-dependency-exists`.",
  "misses": null,
  "where": [
    "text"
  ],
  "groups": [
    "owasp-agentic-top10"
  ],
  "eval_cases": 6,
  "eval_executed": 0,
  "latest": {
    "version": "0.0.3",
    "date": "2026-09-29",
    "change": "Point at the mechanised slice: the agentic-code-security gate's supply pack refuses MCP servers launched without an exact version or commit, plain-HTTP MCP URLs, trust_remote_code and unpinned prompt pulls, at commit and at tool use. Everything else here stays advisory, and no rule text or claim is raised; the pointer is a see() and a references section."
  },
  "agent_labels": {
    "claude-code": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "cursor": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "codex": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "copilot": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "devin": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "grok": {
      "keyword": "ungraded",
      "says": "Not graded yet for Grok"
    },
    "goose": {
      "keyword": "ungraded",
      "says": "Not graded yet for goose"
    },
    "antigravity": {
      "keyword": "ungraded",
      "says": "Not graded yet for Antigravity"
    },
    "openhands": {
      "keyword": "ungraded",
      "says": "Not graded yet for OpenHands"
    },
    "kimi-code": {
      "keyword": "ungraded",
      "says": "Not graded yet for Kimi Code"
    },
    "factory-droid": {
      "keyword": "ungraded",
      "says": "Not graded yet for Factory Droid"
    }
  },
  "source_url": "https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/agentic-security/owasp-asi04-agentic-supply-chain",
  "enforces": "advisory",
  "examples": []
}