excessive-agency

From README

Excessive Agency (OWASP LLM08:2025) What this checks Prevents autonomous agents from taking irreversible or high-impact actions without human oversight. When an LLM can directly write files, send emails, or modify databases, a single compromised or hallucinated step can cause unrecoverable damage. Vulnerable patterns Agent dispatches an irreversible action (send mail, delete record, deploy, drop table) immediately on LLM instruction with no human confirmation step Single LLM response authorizes a high-impact production action with no impact classification or approval gate Agent runs with write access to resources beyond what the task requires — no least-privilege scoping at the tool boundary No kill switch, pause mechanism, bounded iteration count, or audit trail for agent actions Tool that accepts a raw query string, shell command, or code blob built by the LLM rather than typed structured parameters Fix immediately Flag the vulnerable code and explain the risk.