agentic-system-security-reviewlisted

# Agentic System Security Review Review the security of a complete model-mediated system while keeping specialized scopes clear. `application-security-review` evaluates conventional application controls. `skill-security-review` evaluates a skill or plugin package. This workflow evaluates the interactions among agents, models, instructions, identity, tools, memory, retrieval, delegation, protocols, and outputs. ## Preconditions Identify the system owner, users, tenants, agent and service identities, models, registered tools, data classifications, trust zones, deployment proposal, and decision under review. Obtain current architecture, code, configuration, and observed test evidence. Treat missing evidence as a gap. ## Workflow 1. Map trust boundaries, principals, credentials, agent hierarchy, models, instructions, tools, toolsets, context, session state, memory, retrieval, external protocols, output consumers, and control-plane owners. 2. Build abuse cases for direct and indirect prompt injection, instruction conflict, excessive agency, privilege abuse, unsafe delegation, and confused-deputy behavior. 3. Review tool misuse, argument manipulation, object ownership, SSRF, network reach, data exfiltration, unsafe external writes, confirmation replay, duplicate side effects, cancellation, idempotency, and emergency stopping. 4. Review skill, model, prompt, dependency, plugin, retrieval, and build supply chains. Pin exact versions and define change review and revocation. 5. Re