How to meet it
OWASP AISVS v1.01
Orchestration & Agentic Security · Component Isolation and Tool Authorization
Check tool outputs against a schema
Verify that tool outputs are validated against schemas.
OWASP AISVS v1.01, requirement 9.3.2
In plain English
Check what tools return against a schema before the agent uses it.
What good looks like
- Each tool has an output schema.
- Output that does not match is rejected.
- Rejections are logged.
How teams usually do it
- Typed parsers or JSON Schema validation in the tool gateway.
Evidence an auditor would accept
- Schemas and validation code.
Common mistakes
- Passing raw tool output straight into the prompt.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.