AST09: No Governance
Risk Level: Medium
At the organizational level: no inventory of what is installed, no approval workflow, no audit trail, no revocation process. Skills get installed by individual developers on corporate machines, and the security team has no visibility into what the agents on their network can do. This is shadow IT with credentials and a shell.
Real-world evidence
Bitdefender documented employees deploying OpenClaw on corporate devices with no security review and no SOC visibility. Per the AST10 project, citing Cisco's State of AI Security 2026, only 34% of enterprises have AI-specific security controls. The project correlates more than 53,000 exposed instances with prior breach activity.
Mitigations
- Maintain a centralized skill inventory: name, version, hash, who installed it, scan status
- Require an approval workflow for skill installation on managed devices
- Give agents scoped credentials on a rotation schedule rather than long-lived shared keys
- Log every skill action in a form the SOC can actually query
- Integrate skill inventory into existing CMDB and CASB tooling instead of building a parallel system
- Tie skill revocation to the employee offboarding process