---
title: "owasp-asi01-agent-goal-hijack"
description: "Keep an agent's objective under the operator's control when the agent ingests untrusted content. Separate retrieved data from instructions, refuse tool-scope expansion requested by that data, and confirm sensitive action"
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi01-agent-goal-hijack--open-coder-ai-org
last-updated: 2026-09-08
---

# owasp-asi01-agent-goal-hijack
Keep an agent's objective under the operator's control when the agent ingests untrusted content. Separate retrieved data from instructions, refuse tool-scope expansion requested by that data, and confirm sensitive actions against the raw action rather than a summary. Use when building RAG pipelines, email/ticket/doc readers, browser agents, or any planner whose context includes fetched content. Do NOT use for the coding agent's own session hygiene — that is `injection-defense`.
- Slug: owasp-asi01-agent-goal-hijack--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/owasp-asi01-agent-goal-hijack/plugin.json
- Version: 0.0.2
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (owasp-asi01-agent-goal-hijack)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi01-agent-goal-hijack--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json