---
title: "owasp-asi06-memory-context-poisoning"
description: "Stop untrusted content from being written into an agent's durable memory or retrieval index, where it silently steers behaviour in later sessions. Keep context ephemeral by default, validate and attribute every memory wr"
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi06-memory-context-poisoning--open-coder-ai-org
last-updated: 2026-09-08
---

# owasp-asi06-memory-context-poisoning
Stop untrusted content from being written into an agent's durable memory or retrieval index, where it silently steers behaviour in later sessions. Keep context ephemeral by default, validate and attribute every memory write, scope memory per user and per task, and let operators inspect and flush it. Use when adding long-term memory, a vector index, session summarisation, or user preference storage. Do NOT use for the coding agent's own memory files — that is `memory-discipline`.
- Slug: owasp-asi06-memory-context-poisoning--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/owasp-asi06-memory-context-poisoning/plugin.json
- Version: 0.0.2
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (owasp-asi06-memory-context-poisoning)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi06-memory-context-poisoning--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json