tools / agent audit / rules / buys or charges for the user without consent · v0.1.0 · View source · Edit on GitHub
Agent audit rule · v0.1.0
Buys or charges for the user without consent
The agent can buy, charge, book or subscribe on the user's behalf with no step where the user agrees to the purchase. Without a manifest the spec cannot show a consent step that may exist in code, so this is reported one level lower.
- high base severity
- 4 test fixtures
high purchase-without-consent
Flagged
// tools.json
1 [
2 {
3 > "name": "purchase_item",
4 "input_schema": {
5 "type": "object",Fix
Ask the user to confirm the item and price before the purchase, and declare the step in the manifest (`approvals: [purchase_item]`).
Fine
// tools.json
[
{
"name": "purchase_item",
"input_schema": {
"type": "object",
"properties": {
"item_id": {
"type": "string"
}
}
}
}
]
// agent.json
{
"agent": {
"name": "Shop bot"
},
"approvals": [
"purchase_*"
]
}