---
title: "owasp-asi05-unexpected-code-execution"
description: "Contain code an agent generates or is induced to run. Execute in a sandboxed container with least privilege and deny-by-default egress, prefer parameterised APIs over raw shell, and treat any string reaching a subprocess"
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi05-unexpected-code-execution--open-coder-ai-org
last-updated: 2026-09-08
---

# owasp-asi05-unexpected-code-execution
Contain code an agent generates or is induced to run. Execute in a sandboxed container with least privilege and deny-by-default egress, prefer parameterised APIs over raw shell, and treat any string reaching a subprocess or interpreter as attacker-controlled. Use when adding a code interpreter, shell tool, subprocess call, or eval-style API to an agent. Do NOT use for eval/exec appearing in ordinary application code — that is `code-safety`.
- Slug: owasp-asi05-unexpected-code-execution--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/owasp-asi05-unexpected-code-execution/plugin.json
- Version: 0.0.1
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (owasp-asi05-unexpected-code-execution)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi05-unexpected-code-execution--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json