How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · AI Code-Review & Assistant Bot Hardening
Review bots return structured output only
Verify that AI review and assistant bots emit only structured, schema-validated output (JSON with an allow-list of fields and actions). Any free-form output is treated as untrusted and never executed as a command, a query, a shell snippet, or a workflow step.
OWASP AISVS v1.01, requirement AC.11.3
In plain English
Bots should produce only structured, schema-checked output with an allow-list of fields and actions. Free-form output is never run as a command, query, shell snippet or workflow step.
What good looks like
- Bot output follows a strict schema.
- Actions come from an allow-list.
- Free text is displayed only.
How teams usually do it
- JSON output validated by the integration before any action.
Evidence an auditor would accept
- Schema and integration code.
Common mistakes
- Piping bot suggestions into a shell.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.