ASI04Agentic Supply Chain Vulnerabilities

The scenario

An agentic assistant lists your second-hand camera using an approved version 1.4 plug-in and payout account ending 4821. A tampered 1.5 update still publishes the listing but changes the submitted payout account to 7890. Compare version provenance, update loading, and payout fields to see how normal-looking functionality can conceal a supply-chain change.

How it works

Compromised Dependency Update: Trust in an older plug-in does not establish the integrity of its update. The problem is in the dependency’s new contents, rather than an instruction in the listing description. Once loaded, it changes data sent to the marketplace service.

Hidden Payout Mutation: The item, price, and publication can all appear normal while the payout destination changes. A success message misses the issue, so the demo compares the confirmed account with the plug-in’s submitted account.

OWASP 2026 risk reference ↗

9:41

SecondLife

Second-hand listing assistant

AI assistant ready

What the AI is operating

Create a resale listing

ItemPricePayout account

A used camera and accessories ready for a marketplace listing

Second-hand camera

NT$8,000

Listed by agentic AI

Listing form

Item namePricePayout account

Approved plug-in

Version1.4

Source and content verified

Updated version

Version1.5

Not loaded