Source: OWASP GenAI Security Project resources:
OWASP’s agentic AI guidance focuses on emerging threats in autonomous systems, including prompt injection, tool misuse, excessive agency, unsafe integrations, memory/context risks, and weak auditability.
| OWASP-style concern | Witnora evidence |
|---|---|
| Prompt injection | Tripwire CI prompt_injection_banner fault and sensitive-output assertions. |
| Tool misuse | MCPBench tool-call sequence monitoring and tool-risk classification. |
| Excessive agency | Onegent Runtime approval gates for high-risk actions. |
| Unsafe integrations | Local-only runtime demos and explicit non-goals for payment/email/vendor systems. |
| Data exfiltration | MCPBench canaries, taint tracking, and outbound action scenarios. |
| Weak auditability | Witnora evidence bundle and Onegent audit packet export. |
The failure scenario library should grow into Witnora’s practical OWASP-style test corpus: one scenario per concrete agent failure mode, each producing a portable evidence packet.