Why it matters
This technical guide expands OWASP ASI03 into five identity-abuse paths: inherited credentials, token theft and reuse, privilege accumulation, inter-agent trust abuse, and semantic privilege escalation. It maps those paths across the attack lifecycle, credential and authorization layers, monitoring signals, preventive controls, and incident-response responsibilities.
My takeaway: Give each agent a distinct, task-scoped identity with short-lived credentials; authorize against both the requesting principal and current task; inventory and rotate every delegated token; remove accumulated access; isolate orchestrator and worker trust; and log enough provenance to attribute each tool action to its human request, agent, credential, and policy decision.