Money action has no amount cap

The agent can move money and nothing in the spec bounds how much. A prompt injection, a misread request or a loop can refund, pay or transfer any amount. In fintech, e-commerce and finance-ops agents this is critical.

high base severity
5 test fixtures

high money-no-cap

Flagged

// tools.json
  8             "type": "string"
  9           },
 10 >         "amount": {
 11             "type": "number"
 12           }

Fix

Add a `maximum` to the amount parameter's JSON Schema, or a manifest limit (`limits: { issue_refund: { max_amount: 200, currency: USD } }`), and enforce the same bound server-side.

Fine

[
  {
    "name": "issue_refund",
    "input_schema": {
      "type": "object",
      "properties": {
        "amount": {
          "type": "number",
          "maximum": 100
        }
      }
    }
  }
]

References

← All rules

Running agents in production?Qlucent assesses agent permissions and data boundaries. →