Missing timestamp enforcement
MediumAV-EXEC-003Execution authorizationCore pack
What it finds
Absence of `expires_at`, `valid_until`, `"exp"`, or request-expiry patterns.
Why it matters
Expired payloads remain valid indefinitely without expiry enforcement.
How to fix it
Enforce request expiry; reject requests older than a defined window (recommended: 5 minutes).
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- MISSING_TIMESTAMP
- How it detects
- Flags a safety control that should be there but is not.
- Confidence
- Likely: strong signal, but review it in context.
- Scans
- Any text-based agent config or source
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.