---
title: "owasp-asi09-human-agent-trust"
description: "Stop an agent from controlling the information a human approves against. Show the raw action rather than a model-authored summary at every confirmation step, forbid persuasive framing in sensitive workflows, and keep an "
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi09-human-agent-trust--open-coder-ai-org
last-updated: 2026-09-08
---

# owasp-asi09-human-agent-trust
Stop an agent from controlling the information a human approves against. Show the raw action rather than a model-authored summary at every confirmation step, forbid persuasive framing in sensitive workflows, and keep an immutable record of what was presented versus what executed. Use when designing approval prompts, human-in-the-loop checkpoints, agent-written PR descriptions, or consent and disclosure flows. Do NOT use for what the agent is permitted to do once approved — that is `owasp-asi02-tool-misuse`.
- Slug: owasp-asi09-human-agent-trust--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/owasp-asi09-human-agent-trust/plugin.json
- Version: 0.0.1
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (owasp-asi09-human-agent-trust)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi09-human-agent-trust--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json