---
title: "owasp-asi09-human-agent-trust"
description: "Stop an agent from controlling the information a human approves against. Show the raw action rather than a model-authored summary at every confirmation step, forbid persuasive framing in sensitive workflows, and keep an "
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi09-human-agent-trust
last-updated: 2026-10-21
---

# owasp-asi09-human-agent-trust
Stop an agent from controlling the information a human approves against. Show the raw action rather than a model-authored summary at every confirmation step, forbid persuasive framing in sensitive workflows, and keep an immutable record of what was presented versus what executed. Use when designing approval prompts, human-in-the-loop checkpoints, agent-written PR descriptions, or consent and disclosure flows. Do NOT use for what the agent is permitted to do once approved, that is `owasp-asi02-tool-misuse`.
- Slug: owasp-asi09-human-agent-trust
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai/chock-catalog
- Manifest: agentic-security/owasp-asi09-human-agent-trust/plugin.json
- Version: 0.0.2
- License: Apache-2.0
- Category (editorial): security
- Skills: 1 (owasp-asi09-human-agent-trust)
- MCP servers: 0
- Stars: 3
- Repository created: 2026-08-17
- Repository last pushed: 2026-10-21
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi09-human-agent-trust
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## Skills

- owasp-asi09-human-agent-trust: Stop an agent from controlling the information a human approves against. Show the raw action rather than a model-authored summary at every confirmation step, forbid persuasive framing in sensitive workflows, and keep an immutable record of what was presented versus what executed. Use when designing…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.