> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flintai.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Unvalidated agent message

> Agent blindly trusts and acts on messages from other agents without semantic or schema validation

Agent blindly trusts and acts on messages from other agents without semantic or schema validation

## How to resolve

Validate all incoming agent messages against an expected schema. Reject messages with unexpected fields, types, or instruction patterns.

## Risk

**Governance/Compliance**

This vulnerability falls under [ASI07:2026 — Insecure Inter-Agent Communication](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/) in the OWASP Top 10 for Agentic Applications. Agent-to-agent messages lack authentication, encryption, or semantic validation.

**Security**

Agent blindly trusts and acts on messages from other agents without semantic or schema validation. If exploited, this can compromise the agent's integrity, confidentiality, or availability, potentially affecting downstream systems and data.

## Explanation

Agent blindly trusts and acts on messages from other agents without semantic or schema validation. This falls under ASI07 (Insecure Inter-Agent Communication): Agent-to-agent messages lack authentication, encryption, or semantic validation.

## Specifications

**Trigger**

* Agent scan detects agent blindly trusts and acts on messages from other agents without semantic or schema validation

The scanner looks for patterns such as:

* agent trusts all inputs from upstream agent without validation
* no message schema enforcement between agents
* inter-agent results used directly without sanity check

**Severity**

* HIGH

**Applies to**: Agent