Agent-Wiz
Agent-Wiz copied to clipboard
[DRAFT] FEAT: Extend Functionality: OWASP Mapping, Agentic Threats & Auto-Generated Attack Scenarios
Hey Team,
This project looks really promising, great job!!! 🙌
Suggestions for Enhancement
-
OWASP Top Ten for LLMs
- Map findings to the OWASP Top Ten for LLMs
-
Agentic Threats & Mitigations
- Integrate concepts from the Agentic Threats and Mitigation Guide (T1-T15).
-
Auto-Generated Attack Scenarios
- Let the tool generate attack scenarios based on the codebase and architecture overview.
- Since it has access to most of the code, it could suggest realistic, contextual attack vectors.
-
Optional Input Extensions
- Support image uploads (e.g., architecture diagrams) or other rich content to further enhance scenario generation.
Thanks @KutalVolkan for opening this issue and your suggestions. These sound very exciting and we'll be picking them one by one to improve threat modeling by Agent-Wiz. Broadly we want the threat model to be filled with actionable insights as the project matures.
Really like point 3 - can keep it in the long-term vision, meanwhile points 1 & 2 can be implemented asap. Feel free to open a PR! We'd love to have your contribution to the project.
Cheers!