---
title: "owasp-asi03-identity-privilege-abuse"
description: "Give each agent its own scoped, short-lived identity so a compromise does not inherit a human's or a shared account's full permissions. Use when an agent needs credentials, a service account, a cloud role, an API token, "
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi03-identity-privilege-abuse--open-coder-ai-org
last-updated: 2026-09-08
---

# owasp-asi03-identity-privilege-abuse
Give each agent its own scoped, short-lived identity so a compromise does not inherit a human's or a shared account's full permissions. Use when an agent needs credentials, a service account, a cloud role, an API token, or when reviewing delegation and impersonation between an agent and its user. Do NOT use for keeping secrets out of the repository — that is `code-safety` and `scan-secrets`.
- Slug: owasp-asi03-identity-privilege-abuse--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/owasp-asi03-identity-privilege-abuse/plugin.json
- Version: 0.0.1
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (owasp-asi03-identity-privilege-abuse)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi03-identity-privilege-abuse--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json