Policies
OWASP ASI10 — Rogue Agents
OWASP ASI10 — Rogue Agents: what it does, its label on each agent, what it misses, and examples.
Catalog policy owasp-asi10-rogue-agents, version 0.0.1, labelled advisory on Claude Code.
What it does
Make an agent that has drifted, been compromised, or was never inventoried detectable and stoppable. Require an owner, expiry, and inventory entry for every agent, sandbox by default, baseline behaviour and alert on deviation, and keep a tested kill switch. Use when deploying a long-running or autonomous agent, allowing sub-agent spawning, or reviewing agent lifecycle and monitoring. Do NOT use for a single hijacked request within a supervised session — that is owasp-asi01-agent-goal-hijack.
On each agent
| Agent | Label | What it does there |
|---|---|---|
| Claude Code | Advisory | Advisory only. It is skill text, and nothing stops a violation |
| Cursor | Advisory | Advisory only. It is skill text, and nothing stops a violation |
| Codex | Advisory | Advisory only. It is skill text, and nothing stops a violation |
| GitHub Copilot | Advisory | Advisory only. It is skill text, and nothing stops a violation |
| Devin | Advisory | Advisory only. It is skill text, and nothing stops a violation |
| Grok | Not graded | Not graded yet for Grok |
| goose | Not graded | Not graded yet for goose |
| Antigravity | Not graded | Not graded yet for Antigravity |
| OpenHands | Not graded | Not graded yet for OpenHands |
| Kimi Code | Not graded | Not graded yet for Kimi Code |
| Factory Droid | Not graded | Not graded yet for Factory Droid |
What it misses
This policy does not state what it misses.
More
Built from engine 5a4b6287a46e and catalog 1e60d211c1bb.