Security category

Permissions & Identity

Least privilege, OAuth scopes, authorization, delegation and human approval analysis.

Agent Permission Security Analyzer

Review declared permissions for excessive privilege, dangerous combinations and weak isolation.

Check whether high-impact agent actions appear to require human confirmation or approval.

Review OAuth scopes and permission strings for broad account access and persistent refresh access.

Check supplied authorization policy text for disabled enforcement, anonymous access and wildcard principals.

Review delegation rules for unrestricted delegation, permission inheritance and excessive depth.