Agentic Actions Auditor

It is an audit workflow from Trail of Bits and examines agent configuration and action boundaries.

• LicenceCC-BY-SA-4.0
• FrontmatterValid name and description
• Risky patterns4 matchs cleared on reading: The matched sandbox modes are named as unsafe audit findings, not requested execution modes. The matched drop-sudo token is an audited safety-strategy option, not a request to execute sudo. The matched sandbox modes are named as unsafe audit findings, not requested execution modes. The matched sandbox modes are named as unsafe audit findings, not requested execution modes.
• Size326 lines
• Last checked27 Sept 2026 · b2bdb88d559bc37e6c2c8314e28e7a2eb47e7cdd9da51e77da347d3517326dc0

What it can touch

• Runs commands

  Runs shell commands such as tests, builds or installs.

• Writes docs

  Creates or updates documents such as specs, plans or ADRs.

Read the source

Fieldbook links to the original instead of copying it, so you always read the version you install.