Unrestricted tool access
HighAV-TOOL-001ToolsCore pack
What it finds
A `tools: ['*']` or `permissions: 'all'`-shaped wildcard tool declaration.
Why it matters
An agent that can invoke any tool it finds has an unreviewed, unbounded action surface.
How to fix it
Replace wildcard tool access with an explicit allowlist of specific tools.
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- BROAD_TOOL_ACCESS
- How it detects
- Looks for a specific risky pattern in the code or config.
- Confidence
- Definite: the risky setting is written plainly in the file.
- Scans
- Agent framework config (LangChain/AutoGen/OpenAI Assistants and similar)
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.