multi-agent-trust

From README

Multi-Agent Trust Boundaries (LLM08:2025) What this checks Detects agent-to-agent calls that lack authentication, authorization, or permission scoping. When agents blindly trust messages from other agents, a compromised or malicious agent can hijack the entire pipeline. Vulnerable patterns Inter-agent call dispatched with no authentication header or signed token Worker or subagent initialized with the orchestrator's full credentials and complete tool scope Output from one agent passed as input to the next without schema validation Receiver that trusts a sender identity claim with no cryptographic verification Fix immediately Flag the vulnerable call site and explain the risk. Then suggest a fix that establishes these properties: Authentication on every agent-to-agent call. A shared secret, signed token, or mTLS credential is attached by the caller and verified by the receiver before any task runs. A sender-name field is not authentication. Least privilege per agent.