Rogue agent onboarding risk
HighAV-IDENT-001IdentityCore pack
What it finds
`registerAgent`/`onboardAgent`/`dynamic agent`/`marketplace` patterns.
Why it matters
An unverified agent or plugin can be onboarded and inherit trusted tool access.
How to fix it
Verify agent identity before onboarding; require explicit approval for new agents/plugins.
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- ROGUE_AGENT_RISK
- How it detects
- Looks for a specific risky pattern in the code or config.
- Confidence
- Likely: strong signal, but review it in context.
- Scans
- Multi-agent orchestration source (agent registries, plugin marketplaces)
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.