CRITICALOWASP Agentic Top 10 ASI02
Tool Misuse and Exploitation
Tool misuse and exploitation occurs when AI agents invoke their connected tools in unintended, unsafe, or malicious ways, whether through adversarial manipulation or emergent behavior that exceeds designed tool usage patterns. For enterprises, this risk is amplified because agents often have access to production APIs, databases, file systems, and external services where uncontrolled tool invocations can cause data corruption, system outages, or security breaches. Evaluate vendors on their support for tool-level access policies, input validation on tool parameters, execution sandboxing, audit logging of all tool calls, and anomaly detection for unusual tool usage patterns. This challenge is part of the OWASP Agentic AI Top 10 and is essential to address before granting agents access to enterprise infrastructure.