Securing OpenAI Agents SDK Against Memory Poisoning (ASI06) Using Pydantic Field Validators (opens in new tab)

The OpenAI Agents SDK is rapidly becoming the standard for building production AI agents. But as agents grow more capable and stateful, a critical attack surface emerges: memory poisoning — OWASP ASI06. This post shows the idiomatic way to defend against it in the OpenAI Agents SDK, using the SDK's own Pydantic context architecture. The integration pattern was validated in a public thread with an OpenAI SDK maintainer. What is ASI06 Memory Poisoning? OWASP's Top 10 for Agentic AI Systems list...