llm-security-commons/mapping
Kjell Tore Guttormsen 4d351d2a31 fix(mapping): state that three of four OWASP maps have no production consumer
llm-security reports (repo-wide grep on their side, coord message
2026-08-10T12:38:19Z) that OWASP_AGENTIC_MAP, OWASP_SKILLS_MAP and
OWASP_MCP_MAP have no production consumer at all — only OWASP_MAP is read
by running code, and only as a fallback when a finding lacks an owasp
field. "Extracted without behaviour change" was true but vacuous for
three of the four maps; this records that instead of leaving it implied.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QJTZgfnjsaN14ti5HXiKhQ
2026-08-10 20:47:37 +02:00
..
owasp-map.json fix(mapping): state that three of four OWASP maps have no production consumer 2026-08-10 20:47:37 +02:00