---
title: "owasp-asi04-agentic-supply-chain"
description: "Verify agent components before loading them, and keep verifying, because runtime tool discovery changes the supply chain after deployment. Use when adding an MCP server, agent framework, plugin, tool registry, or model a"
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi04-agentic-supply-chain
last-updated: 2026-10-21
---

# owasp-asi04-agentic-supply-chain
Verify agent components before loading them, and keep verifying, because runtime tool discovery changes the supply chain after deployment. Use when adding an MCP server, agent framework, plugin, tool registry, or model artifact, and when reviewing what an agent may pull at runtime. Do NOT use for ordinary application dependencies already covered by `verify-dependency-exists`.
- Slug: owasp-asi04-agentic-supply-chain
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai/chock-catalog
- Manifest: agentic-security/owasp-asi04-agentic-supply-chain/plugin.json
- Version: 0.0.3
- License: Apache-2.0
- Category (editorial): security
- Skills: 1 (owasp-asi04-agentic-supply-chain)
- MCP servers: 0
- Stars: 3
- Repository created: 2026-08-17
- Repository last pushed: 2026-10-21
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi04-agentic-supply-chain
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## Skills

- owasp-asi04-agentic-supply-chain: Verify agent components before loading them, and keep verifying, because runtime tool discovery changes the supply chain after deployment. Use when adding an MCP server, agent framework, plugin, tool registry, or model artifact, and when reviewing what an agent may pull at runtime. Do NOT use for o…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.