alexzhu0 Tool Permission Audit
Purpose
Review an agent's tools and permission policy for unsafe access, unclear gates, and least-privilege gaps.
Fit
- Use when an agent can read/write files, call connectors, run commands, publish, or touch credentials.
- Do not use when the agent has no tool access and only produces plain text.
Inputs
- Tool list, command allowlist, connector scopes, system instructions, or policy text.
- User expectations for autonomy, external writes, destructive actions, and credentials.
- Known environment restrictions.
Workflow
- Inventory tools and classify their side effects.
- Separate read-only, local write, external write, credential, and destructive actions.
- Check whether approval gates match the risk.
- Identify overbroad scopes and ambiguous wording.
- Recommend a least-privilege policy patch.
Output
Produce Markdown with:
- Permission Matrix
- Risk Summary
- Approval Gates
- Overbroad Access
- Policy Gaps
- Recommended Patch
- Residual Risks
Validation
- Public or external writes are clearly gated.
- Destructive commands are not treated as normal execution.
- Credential handling is explicit.
- Local reversible actions are separated from irreversible actions.
- Recommendations preserve useful autonomy where risk is low.