tools / agent audit / rules / money action has no approval step · v0.1.0 · View source · Edit on GitHub
Agent audit rule · v0.1.0
Money action has no approval step
The agent can refund, pay, charge or transfer without a human confirming it. Money that leaves is hard to get back. Without a manifest the spec cannot show an approval that may exist in code, so this is reported one level lower, and also one level lower when the amount is capped.
- high base severity
- 4 test fixtures
high money-no-approval
Flagged
// tools.json
1 [
2 {
3 > "name": "issue_refund",
4 "input_schema": {
5 "type": "object",Fix
Put a human approval step in front of the action and declare it in the manifest (`approvals: [issue_refund]`).
Fine
// tools.json
[
{
"name": "issue_refund",
"input_schema": {
"type": "object",
"properties": {
"amount": {
"type": "number"
}
}
}
}
]
// agent.json
{
"agent": {
"name": "Refund bot"
},
"approvals": [
"issue_*"
]
}