Skip to main content
High-impact actions (delete, send, pay, deploy) executed without explicit user confirmation step

​
How to resolve

Add explicit confirmation gates before destructive / high-impact operations (delete, drop, send, deploy). Require user input before proceeding with high-impact actions.

​
Risk

Governance/Compliance This vulnerability falls under ASI09:2026 — Human-Agent Trust Exploitation in the OWASP Top 10 for Agentic Applications. Users manipulated into harmful decisions by trusting persuasive or authoritative agent outputs. Security High-impact actions (delete, send, pay, deploy) executed without explicit user confirmation step. If exploited, this can compromise the agent’s integrity, confidentiality, or availability, potentially affecting downstream systems and data.

​
Explanation

High-impact actions (delete, send, pay, deploy) executed without explicit user confirmation step. This falls under ASI09 (Human-Agent Trust Exploitation): Users manipulated into harmful decisions by trusting persuasive or authoritative agent outputs.

​
Specifications

Trigger
  • Agent scan detects high-impact actions (delete, send, pay, deploy) executed without explicit user confirmation step
The scanner looks for patterns such as:
  • delete or drop operations in agent tool with no confirm step
  • financial transaction tool without approval gate
  • deploy or publish action without human sign-off
Severity
  • HIGH
Applies to: Agent