AG-022

Potential Data Exfiltration Path

critical

What Foo Guard detects

The agent combines explicit data-reading capabilities with arbitrary outbound network access and no human approval boundary. This indicates a potential data exfiltration risk, not confirmed exfiltration behavior.

How to fix

Restrict outbound network destinations, minimize accessible data, and introduce approval controls for operations that could transmit sensitive information.