Risk
Cross-Agent/Inter-Agent Abuse
Description
Multiple agents collude, or one agent writes code/files that another executes with higher privilege, bypassing intended isolation or review.
Example
Agent A writes a file, Agent B (with higher privileges) executes it, sidestepping controls.
Assets Affected
Agentic platform (no code)
Coding agent (config)
Mitigation
- Isolate agent workspaces
- Audit and restrict cross-agent file/code handoff
- Monitor inter-agent communications for policy violations
Standards Mapping
- ISO 42001: A.9.3, A.6.2.6
- OWASP Top 10 for LLM: LLM06
- NIST AI RMF: GOVERN 3.2, MEASURE 2.4