---
title: "owasp-asi04-agentic-supply-chain"
description: "Verify agent components before loading them, and keep verifying, because runtime tool discovery changes the supply chain after deployment. Use when adding an MCP server, agent framework, plugin, tool registry, or model a"
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi04-agentic-supply-chain--open-coder-ai-org
last-updated: 2026-09-08
---

# owasp-asi04-agentic-supply-chain
Verify agent components before loading them, and keep verifying, because runtime tool discovery changes the supply chain after deployment. Use when adding an MCP server, agent framework, plugin, tool registry, or model artifact, and when reviewing what an agent may pull at runtime. Do NOT use for ordinary application dependencies already covered by `verify-dependency-exists`.
- Slug: owasp-asi04-agentic-supply-chain--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/owasp-asi04-agentic-supply-chain/plugin.json
- Version: 0.0.2
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (owasp-asi04-agentic-supply-chain)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi04-agentic-supply-chain--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json