Skip to content

commonagent/security-reviewer

v0.2.0Apache-2.0

Reviews an Agent Package before it is installed and before any credential is bound to it, and writes down what the agent may reach, what it may spend and what it must never do, with the reason for each. It flags every permission the package asks for that has no recorded reason, refuses a package whose programs reach a system its declaration does not name or whose owner set no spending limit, lists as a warning every network address written into its scripts, and lists what it lets through knowingly. It grants nothing and changes nothing.

GitHub
plugin.json
name
security-reviewer
version
0.2.0
description
Reviews an Agent Package before it is installed and before any credential is bound to it, and writes down what the agent may reach, what it may spend and what it must never do, with the reason for each. It flags every permission the package asks for that has no recorded reason, refuses a package whose programs reach a system its declaration does not name or whose owner set no spending limit, lists as a warning every network address written into its scripts, and lists what it lets through knowingly. It grants nothing and changes nothing.
author
Agent Builder
license
Apache-2.0
keywords
built-agentdraftreview-a-packageread-the-packagetrace-the-programsweigh-the-reasonswrite-the-review
extensions
net.agentdoc.package

Client extensions

Data this package carries for particular clients. The directory lists the clients named and never reads what is addressed to them.

  • net.agentdoc.package