{
  "schema_version": 1,
  "id": "owasp-asi10-rogue-agents",
  "track": "coding",
  "name": "OWASP ASI10 — Rogue Agents",
  "version": "0.0.1",
  "sha256": "fa9fbf2335f01ef694a435d85c5a78628d3b4fc6a359668cdb9cf6961e7c5181",
  "sha256_v1": "8b4d85bc9038db06d65e4bbca6d0b6bdc23f00a4a049522ffea622f189d4d122",
  "keyword": "advise",
  "word": "advisory",
  "says": "advisory only. It is skill text, and nothing stops a violation",
  "description": "Make an agent that has drifted, been compromised, or was never inventoried detectable and stoppable. Require an owner, expiry, and inventory entry for every agent, sandbox by default, baseline behaviour and alert on deviation, and keep a tested kill switch. Use when deploying a long-running or autonomous agent, allowing sub-agent spawning, or reviewing agent lifecycle and monitoring. Do NOT use for a single hijacked request within a supervised session — that is `owasp-asi01-agent-goal-hijack`.",
  "misses": null,
  "where": [
    "text"
  ],
  "groups": [
    "owasp-agentic-top10"
  ],
  "eval_cases": 6,
  "eval_executed": 0,
  "latest": {
    "version": "0.0.1",
    "date": "2026-08-12",
    "change": "Initial draft from OWASP Top 10 for Agentic Applications 2026, ASI10."
  },
  "agent_labels": {
    "claude-code": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "cursor": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "codex": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "copilot": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "devin": {
      "keyword": "advise",
      "says": "advisory only. It is skill text, and nothing stops a violation"
    },
    "grok": {
      "keyword": "ungraded",
      "says": "Not graded yet for Grok"
    },
    "goose": {
      "keyword": "ungraded",
      "says": "Not graded yet for goose"
    },
    "antigravity": {
      "keyword": "ungraded",
      "says": "Not graded yet for Antigravity"
    },
    "openhands": {
      "keyword": "ungraded",
      "says": "Not graded yet for OpenHands"
    },
    "kimi-code": {
      "keyword": "ungraded",
      "says": "Not graded yet for Kimi Code"
    },
    "factory-droid": {
      "keyword": "ungraded",
      "says": "Not graded yet for Factory Droid"
    }
  },
  "source_url": "https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/agentic-security/owasp-asi10-rogue-agents",
  "enforces": "advisory",
  "examples": []
}