tools / agent audit / rules / can export or list records in bulk · v0.1.0 · View source · Edit on GitHub
Agent audit rule · v0.1.0
Can export or list records in bulk
The agent can export or list records in bulk, either on sensitive data or with no upper bound on how many come back in one call. One steered call can pull a whole table.
- medium base severity
- 4 test fixtures
medium bulk-export
Flagged
// tools.json
1 [
2 {
3 > "name": "export_all_customers",
4 "input_schema": {
5 "type": "object",Fix
Add a limit parameter with a schema `maximum`, page results, and keep bulk exports of personal, health or financial data out of the agent.
Fine
[
{
"name": "export_orders",
"input_schema": {
"type": "object",
"properties": {
"limit": {
"type": "integer",
"maximum": 100
}
}
}
}
]