GenAI Project – Agentic Security Initiative (ASI) – Insecure Agent Samples
Warning
The sample applications here are deliberately insecure to demonstrate Agent security risks. Please exercise caution when deploying in your environment.
Objective
We aim to demonstrate security risks in well-known Agentic AI (also known as Agents) frameworks, particularly how Agent misconfigurations (i.e., insecure code, framework-specific misconfigurations) can lead to vulnerabilities identified in the OWASP Top 10 for Gen AI and Large Language Model Applications 2025.
This repository contains examples of insecure code and/or security misconfigurations in common Agent frameworks such as:
More Agent frameworks will be supported in the future.
