llm-security reports (repo-wide grep on their side, coord message 2026-08-10T12:38:19Z) that OWASP_AGENTIC_MAP, OWASP_SKILLS_MAP and OWASP_MCP_MAP have no production consumer at all — only OWASP_MAP is read by running code, and only as a fallback when a finding lacks an owasp field. "Extracted without behaviour change" was true but vacuous for three of the four maps; this records that instead of leaving it implied. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QJTZgfnjsaN14ti5HXiKhQ |
||
|---|---|---|
| .. | ||
| owasp-map.json | ||