Show HN: OWASP Finbot Defended with Tenuo

Category: security

Tags: agentic-ai, security, capability-based-security, prompt-injection, owasp

Score: 7.5/10 (Innovation: 7, Technical: 7, Documentation: 9, Utility: 7)

A fork of OWASP FinBot CTF that adds an optional defended mode using Tenuo warrants—signed capability tokens that constrain each agent's tool calls and arguments. It demonstrates that prompt injection can still fool the model, but a fooled agent can't execute unauthorized actions. Includes rigorous empirical evaluation with Promptfoo across multiple attack scenarios, showing zero compromises with the defense enabled.

Target audience: security researchers, AI engineers, backend developers

Repository: https://github.com/tenuo-ai/finbot-ctf · Python · NOASSERTION · 1 stars

View on Hacker News