Agent WranglersSupply chain and setup Recommended
Plan attacks before building
Before building a feature, write down what an attacker would want from it and how they could get it. Then design those paths away.
How to do it
For each feature, list the data, the money and the actions at stake. Note who could abuse each one, such as a stranger, a customer or a staff member. Turn each abuse into a test case.
How to check
Every feature that handles money, accounts or personal data has a short threat list, and each item links to a test.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup/threat-model.