ASIScan — notes on agent security https://asiscan.dev/blog/ Static analysis for AI agent codebases, mapped to the OWASP Top 10 for Agentic Applications, the OWASP LLM Top 10, and EU AI Act Article 50. en ASI05: when your agent builds a shell command out of model output https://asiscan.dev/blog/asi05-unexpected-code-execution https://asiscan.dev/blog/asi05-unexpected-code-execution A real exec() call built from model output, why input validation misses it, the fix, and how ASIScan's rules catch it. Tue, 29 Sep 2026 13:00:00 GMT The OWASP Top 10 for Agentic Applications, explained for engineers https://asiscan.dev/blog/owasp-top-10-agentic-applications https://asiscan.dev/blog/owasp-top-10-agentic-applications The OWASP Top 10 for Agentic Applications, walked category by category: what each one looks like in code and what static analysis can and can't see. Tue, 22 Sep 2026 13:00:00 GMT ASI09: the approval dialog your agent wrote for itself https://asiscan.dev/blog/asi09-human-agent-trust-exploitation https://asiscan.dev/blog/asi09-human-agent-trust-exploitation If a model composes the text of your confirmation prompt, the human is approving a description, not an action. How that gap opens and how to close it. Fri, 14 Aug 2026 13:00:00 GMT