Back to skill

Security audit

Agentsop Bounded Loop

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only coding skill that teaches users how to bound AI agent loops and does not request unusual access or perform hidden actions.

This skill is reasonable to install if you want guidance for designing bounded AI-agent loops. Treat the included framework examples as implementation advice to review against your own application, especially where they recommend human escalation, shared loop state, or timeout budgets.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.