Insecure Agent Samples

About

GenAI Project – Agentic Security Initiative (ASI) – Insecure Agent Samples

 

Warning

 

The sample applications here are deliberately insecure to demonstrate Agent security risks. Please exercise caution when deploying in your environment.

Objective

 

We aim to demonstrate security risks in well-known Agentic AI (also known as Agents) frameworks, particularly how Agent misconfigurations (i.e., insecure code, framework-specific misconfigurations) can lead to vulnerabilities identified in the OWASP Top 10 for Gen AI and Large Language Model Applications 2025.

This repository contains examples of insecure code and/or security misconfigurations in common Agent frameworks such as:

  1. LangChain
  2. LangGraph
  3. CrewAI
  4. AutoGen
  5. OpenAI Swarm (Experimental)
  6. Amazon Bedrock Agents

More Agent frameworks will be supported in the future.

Scroll to Top