How to meet it
OWASP AISVS v1.01
Orchestration & Agentic Security · Component Isolation and Tool Authorization
Sandbox every tool
Verify that each tool/plugin executes in a least-privilege sandbox or is otherwise isolated from model operations.
OWASP AISVS v1.01, requirement 9.3.1
In plain English
Run each tool in its own sandbox with only the access it needs, separate from the model.
What good looks like
- Tools run in separate processes or containers.
- Each has only the files, network and credentials it needs.
- A compromised tool cannot reach other tools or the model host.
How teams usually do it
- Containers or serverless functions per tool, with least-privilege roles.
Evidence an auditor would accept
- Tool deployment configuration.
Common mistakes
- Running all tools in the agent's process with shared credentials.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.