AgentOps-AI / AgentOps-AI/agentops

Feature: OWASP ASI06 memory poisoning detection events in AgentOps

未关闭
#1,386 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
Python
星标
5.8k
派生
619
PR 合并指标
30 天内没有已合并 PR

描述

## Summary

AgentOps provides monitoring and observability for AI agents. As memory-enabled agents become more common, **memory poisoning** (OWASP ASI06) is a critical security event class that should be tracked, alerted on, and audited — a natural fit for AgentOps.

## The Problem

Memory poisoning attacks inject malicious content into an agent's persistent memory, causing adversarial behavior in future sessions. These attacks are:
- Silent (no immediate visible failure)
- Persistent (survive across sessions)
- Hard to detect without dedicated scanning

## Proposed Integration

[OWASP Agent Memory Guard](https://github.com/OWASP/www-project-agent-memory-guard) provides ASI06 detection. Integrating with AgentOps:

```python
import agentops
from agent_memory_guard import MemoryGuard

agentops.init()
guard = MemoryGuard()

@agentops.record_action("memory_write")
def safe_memory_write(content: str):
result = guard.scan(content)

if not result.is_safe:
# Record security event in AgentOps
agentops.record(agentops.ActionEvent(
action_type="security_alert",
params={"threat_type": result.threat_type, "content_hash": hash(content)},
returns={"blocked": True}
))
raise SecurityError(f"Memory poisoning blocked: {result.threat_type}")

store_memory(content)
```

## Request

1. Add **security event types** to AgentOps for memory poisoning / ASI06 events
2. Document OWASP Agent Memory Guard as a recommended companion for production agent monitoring
3. Consider a built-in memory safety score in AgentOps session analytics

**PyPI:** `pip install agent-memory-guard`
**OWASP Project:** https://github.com/OWASP/www-project-agent-memory-guard

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。