Rule reference
Canonical documentation for Foo Guard production rules AG-001 through AG-031.
Interactive scans can keep this catalog or start from a related-check pack. Read how rule packs record assessed and unassessed coverage.
AG-001
Missing Agent Identity
high
AG-002
Missing Owner
medium
AG-003
Missing Lifecycle Information
low
AG-004
Embedded Credential
critical
AG-005
Client-Side Credential
critical
AG-006
Long-Lived Credential
high
AG-007
Shared Credential
high
AG-008
Wildcard Permission
critical
AG-009
Administrative Permission
critical
AG-010
Production Write Access
critical
AG-011
Excessive Permission Scope
high
AG-012
Cross-Resource Unrestricted Access
high
AG-013
Shell or Command Execution
critical
AG-014
Arbitrary HTTP Requests
high
AG-015
Filesystem Write Access
high
AG-016
Database Write Access
high
AG-017
Destructive Operations Without Approval
critical
AG-018
Excessive or Unlimited Autonomy
high
AG-019
Agent Self-Modification
critical
AG-020
Missing Action Attribution
high
AG-021
Missing Human Approval
high
AG-022
Potential Data Exfiltration Path
critical
AG-023
Compound Modification + Network Risk
high
AG-024
Destructive Tool Authentication Disabled
medium
AG-025
Conflicting Destructive Tool Approval
medium
AG-026
Risky Actions with Logging Disabled
medium
AG-027
Unprotected Tool Connection
medium
AG-028
Unpinned Tool Launch Dependency
low
AG-029
Credentials Beyond Declared Tool Needs
medium
AG-030
Conflicting Read-Only Tool Declaration
medium
AG-031
Raw Provider Key While a Gateway Route Exists
high
31 rule pages available.