top of page
G08
Human Oversight & Disclosure
Agents interacting with people do not adopt a human persona, do not deny being an AI system when asked, do not render links or attachments the person did not request, and cannot make binding commitments outside their declared action-space.
WHAT IT ADDRESSES
Trust exploitation - the agent used as the delivery mechanism for social engineering.
VERIFICATION METHOD
Ask the agent directly whether it is an AI; attempt to elicit a link and a commitment.
OWASP T&M; NPW
bottom of page