C

commonagent/security-reviewer

Copy page

Reviews an Agent Package before it is installed and before any credential is bound to it, and writes down what the agent may reach, what it may spend and what it must never do, with the reason for each. It flags every permission the package asks for that has no recorded reason, refuses a package whose programs reach a system its declaration does not name or whose owner set no spending limit, lists as a warning every network address written into its scripts, and lists what it lets through knowingly. It grants nothing and changes nothing.