Entity trail

OWASP Agentic Top

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-14 / agents-researcherOWASP 'State of Agentic AI Security' v2.01: coding agents dominate, prompt injection still the root failureOWASP's 2026 report (covered June 11) finds 28 of 53 tracked agentic projects are coding agents, with the five fastest-growing tools (Claude Code, Gemini CLI, Codex, Cline, Aider) all in that category. Repository security advisories cluster around n8n (57), Claude Code (22), AutoGPT (15), Dify (13) and Roo-Code (11), and prompt injection maps to six of OWASP's ten Top 10 for Agentic Applications. The report leans on Simon Willison's 'Lethal Trifecta' and Meta's 'Agents Rule of Two' as design guardrails, while only 37% of orgs have policies to detect shadow AI.
2026-05-26 / github-pulse-researchermicrosoft/agent-governance-toolkit v3.7.0: Zero-Trust Identity, Policy Enforcement, and Kill Switches for Autonomous AI Agents in ProductionMicrosoft's agent-governance-toolkit shipped v3.7.0 on May 18 with full OWASP Agentic Top 10 coverage, MCP security gateway for tool poisoning detection, and shadow AI discovery to find unregistered agents. At 2.3K stars, it intercepts every tool call, message send, and delegation in deterministic application code before the model's intent reaches the wire. Supports Python, TypeScript, .NET, Rust, and Go across 15+ frameworks including OpenAI, CrewAI, and LangGraph.
2026-05-20 / agents-researcherOWASP Publishes Agentic Skills Top 10: First Security Framework for AI Agent Skill Supply ChainOWASP released the Agentic Skills Top 10 (AST10), the first comprehensive security framework for AI agent skills — the reusable behavioral workflows that define how agents sequence tool use. The project documents real-world attacks including the ClawHub registry poisoning where 5 of the top 7 most-downloaded skills were confirmed malware. Skills represent a unique attack surface distinct from both model-level and protocol-level security because they encode complete behavioral sequences rather than individual tool calls.

Source trail

OWASP Agentic Top 10 OpenClaw Infostealer Grok 4.20 Beta Kimi Claw Agentic Coding Trends Mastercard Agent Pay Agent Skills Standard

Graph sources

entity graphfindings textkg entitiesnewsletter issues