Agent can call any URL with any method
HighAV-TOOL-003ToolsCore packNew in 2.0
What it finds
The agent has a general-purpose HTTP tool that can call any URL, with no host allowlist.
Why it matters
A generic request tool turns any injected instruction into "send this data there" or "call this internal admin API".
What an attacker could do: The agent can reach any website or internal service and send it data.
How to fix it
Replace it with specific tools for the APIs you need, or enforce a strict host allowlist and block private IP ranges.
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- GENERIC_HTTP_TOOL
- How it detects
- Looks for a risky pattern, and stays quiet when a matching safeguard is present.
- Confidence
- Definite: the risky setting is written plainly in the file.
- Scans
- Any text-based agent source or configuration (JS/TS/Python/JSON/YAML)
- OWASP LLM Top 10
- LLM07 - Insecure Plugin Design, LLM08 - Excessive Agency
- NIST AI RMF
- MG-2.2
- SOC 2
- CC6.6
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.