owasp-agentic-review

# OWASP Agentic Review — Prompt Injection, Tool Poisoning, Agency & Supply Chain Curated OWASP LLM Top 10 (2025) + OWASP Agentic Security review for **agents, skills, plugins, hooks, MCP, tool use, prompt handling, and provenance**. Use when reviewing agentic capabilities, supply-chain surface, or when `security-reviewer` (app code) needs agentic specialization. **Evidence-cited, severity-ranked — do not hallucinate findings.** Every finding must cite `observation (file:line, registry YAML, tool description) + impact + severity + confidence + evidence`. Delegates to `supply-chain-audit` + `mcp-audit` for supply-chain/MCP depth. > **OWASP source:** OWASP Top 10 for LLM Applications 2025 (v1.1, 2025-02-18) + OWASP Agentic & GenAI security guidance (prompt injection, insecure output, supply chain, excessive agency, data leakage, insecure plugin). Map findings to IDs `LLM01`–`LLM10` + `AGNT01`–`AGNT06` where applicable; do not fabricate beyond listed. Cite https://owasp.org/www-project-top-10-for-large-language-model-applications/ and https://owasp.org/www-project-agentic-security/ where mapping. ## OWASP LLMs / Agentic mapping (curated checklist) | OWASP ID | Title | What to check (evidence) | Mode | |----------|-------|--------------------------|------| | LLM01 | Prompt Injection | Tool descriptions / skill instructions contain `ignore previous`, `send secrets`, `exfiltrate`, `override system`, `[/INST]`; user input flows into skill instructions without delimiting; hook `p...