autogen - 💡(How to fix) Fix Security: Add OWASP Agent Memory Guard to security docs (memory poisoning protection) [1 participants]

Context

The OWASP Top 10 for Agentic Applications (released 2025) identifies ASI06: Memory Poisoning as a critical vulnerability for agents with persistent memory.

AutoGen agents that use persistent memory stores are vulnerable to memory poisoning — where malicious content injected into memory silently influences future agent decisions across sessions.

Request

Would the AutoGen team consider adding a mention of OWASP Agent Memory Guard to the security documentation or integration guides?

What it is: The OWASP reference implementation for ASI06 — a Python middleware that:

• Detects tampered memory entries using SHA-256 integrity baselines
• Scans memory reads/writes for prompt injection payloads and secret leakage
• Enforces YAML-defined policies (block/warn/strip) at the memory boundary
• Sub-100μs latency, zero external dependencies

pip install agent-memory-guard

GitHub: https://github.com/OWASP/www-project-agent-memory-guard
PyPI: https://pypi.org/project/agent-memory-guard/

This has been adopted by the UK Government BEIS Inspect AI evaluation framework as part of their AI safety evaluation suite.

Happy to provide a code example or contribute a documentation PR.