Agentic AI Risk Assessment

Evaluate agentic AI applications against all 10 risk categories by following the full procedure in plays/agentic-ai-risk-assess.md.

Steps

Architecture Mapping — Identify agent type (single/multi-agent), autonomy level, tool ecosystem, memory systems, inter-agent communication protocols, and human oversight mechanisms.
Assess Each Agentic Top 10 Risk:
- ASI01 Agent Goal Hijack — Hidden prompts, instruction override, silent exfiltration via copilot patterns
- ASI02 Tool Misuse — Legitimate tools bent into destructive outputs, tool parameter manipulation
- ASI03 Identity & Privilege Abuse — Leaked credentials, excessive permissions, agent operating beyond scope
- ASI04 Agentic Supply Chain — Poisoned MCP/A2A components, runtime component tampering, dynamic ecosystem risks
- ASI05 Unexpected Code Execution — Natural language execution paths leading to RCE, code generation vulnerabilities
- ASI06 Memory & Context Poisoning — Long-term behavior manipulation via memory attacks, context window exploits
- ASI07 Insecure Inter-Agent Communication — Spoofed messages, man-in-the-middle between agents, cluster misdirection
- ASI08 Cascading Failures — False signals propagating through automated pipelines, escalating impact chains
- ASI09 Human-Agent Trust Exploitation — Confident misleading explanations, social engineering of human operators
- ASI10 Rogue Agents — Misalignment, concealment, self-directed action, emergent harmful behavior