tools / agent audit / rules / can do something the manifest puts out of scope · v0.1.0 · View source · Edit on GitHub
Agent audit rule · v0.1.0
Can do something the manifest puts out of scope
The manifest says this agent must never have this effect, or no role the agent acts for is granted anything like this action. Either the spec gives the agent more than its builders intended, or the manifest is out of date.
- high base severity
- 4 test fixtures
high out-of-scope-action
Flagged
// tools.json
1 [
2 {
3 > "name": "reset_user_mfa",
4 "input_schema": {
5 "type": "object",Fix
Remove the action from the agent's tools, policy or scopes. If it is intended, grant it to the roles that need it (`roles.<role>.allow`) and take it off `out_of_scope`.
Fine
// tools.json
[
{
"name": "reset_user_mfa",
"input_schema": {
"type": "object",
"properties": {
"user_id": {
"type": "string"
}
}
}
}
]
// agent.json
{
"agent": {
"name": "Helpdesk bot"
},
"out_of_scope": [
"delete"
]
}