---
title: "owasp-asi06-memory-context-poisoning"
description: "Stop untrusted content from being written into an agent's durable memory or retrieval index, where it silently steers behaviour in later sessions. Keep context ephemeral by default, validate and attribute every memory wr"
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi06-memory-context-poisoning
last-updated: 2026-10-21
---

# owasp-asi06-memory-context-poisoning
Stop untrusted content from being written into an agent's durable memory or retrieval index, where it silently steers behaviour in later sessions. Keep context ephemeral by default, validate and attribute every memory write, scope memory per user and per task, and let operators inspect and flush it. Use when adding long-term memory, a vector index, session summarisation, or user preference storage. Do NOT use for the coding agent's own memory files, that is `memory-discipline`.
- Slug: owasp-asi06-memory-context-poisoning
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai/chock-catalog
- Manifest: agentic-security/owasp-asi06-memory-context-poisoning/plugin.json
- Version: 0.0.2
- License: Apache-2.0
- Category (editorial): security
- Skills: 1 (owasp-asi06-memory-context-poisoning)
- MCP servers: 0
- Stars: 3
- Repository created: 2026-08-17
- Repository last pushed: 2026-10-21
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi06-memory-context-poisoning
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## Skills

- owasp-asi06-memory-context-poisoning: Stop untrusted content from being written into an agent's durable memory or retrieval index, where it silently steers behaviour in later sessions. Keep context ephemeral by default, validate and attribute every memory write, scope memory per user and per task, and let operators inspect and flush it…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.