AI editor set to run every tool without asking
HighAV-FW-013Human oversightFramework packNew in 2.0
What it finds
The editor's AI agent mode (VS Code Copilot / Cursor) is set to auto-approve all tools or terminal commands.
Why it matters
Coding agents read untrusted files, issues and web pages. With auto-approve on, an instruction hidden in any of them can run commands on your machine.
What an attacker could do: Files you open could make the editor agent run commands silently.
How to fix it
Turn global auto-approve off and auto-approve only specific, safe commands.
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- EDITOR_AGENT_AUTO_APPROVE
- How it detects
- Looks for a specific risky pattern in the code or config.
- Confidence
- Definite: the risky setting is written plainly in the file.
- Scans
- Agent source using the named framework (LangChain, CrewAI, AutoGen, OpenAI Agents SDK, Claude Agent SDK, computer-use tools)
- OWASP LLM Top 10
- LLM01 - Prompt Injection, LLM08 - Excessive Agency
- NIST AI RMF
- MG-2.2
- SOC 2
- CC6.8
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.
Related checks
- Agent can move money with no amount limitAV-HUMAN-003 · Critical
- Missing human-in-the-loop gatesAV-HUMAN-001 · High
- Built-in safety controls turned offAV-HUMAN-002 · High
- Destructive tool with no confirmationAV-HUMAN-004 · High
- OpenAI Agents SDK agent with tools but no guardrailsAV-FW-006 · Medium
- MCP tools set to run without askingAV-MCP-104 · Medium