Agent can move money with no amount limit
CriticalAV-HUMAN-003Human oversightCore packNew in 2.0
What it finds
A tool the model can call creates transfers, payouts, payments or refunds, with no maximum amount and no approval step.
Why it matters
One manipulated or confused tool call can move any amount of money, and payments are hard to reverse.
What an attacker could do: The agent can send or refund unlimited amounts without a person agreeing.
How to fix it
Enforce a hard per-transaction and daily limit in code, and require human approval above a small threshold.
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- PAYMENT_NO_AMOUNT_LIMIT
- How it detects
- Looks for a risky pattern, and stays quiet when a matching safeguard is present.
- Confidence
- Likely: strong signal, but review it in context.
- Scans
- Any text-based agent source or configuration (JS/TS/Python/JSON/YAML)
- OWASP LLM Top 10
- LLM08 - Excessive Agency
- NIST AI RMF
- MG-2.2, GV-4.1
- SOC 2
- CC6.1, CC8.1
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.
Related checks
- Missing human-in-the-loop gatesAV-HUMAN-001 · High
- Built-in safety controls turned offAV-HUMAN-002 · High
- Destructive tool with no confirmationAV-HUMAN-004 · High
- AI editor set to run every tool without askingAV-FW-013 · High
- OpenAI Agents SDK agent with tools but no guardrailsAV-FW-006 · Medium
- MCP tools set to run without askingAV-MCP-104 · Medium