Permissions
Checks whether the agent has more access than its task requires.
Check inbox access, prompt injection, impersonation, credential scope and autonomous sending risk.
Checks whether the agent has more access than its task requires.
Reviews how external content can influence tools and actions.
Measures approval gates, limits and potential blast radius.
Evaluates logging, testing and incident containment.