Skip to content

Add Trustabl Agent Scanner to CI - #1

Open
joshua-trustabl wants to merge 1 commit into
Jminding:mainfrom
joshua-trustabl:add-trustabl-action
Open

Add Trustabl Agent Scanner to CI#1
joshua-trustabl wants to merge 1 commit into
Jminding:mainfrom
joshua-trustabl:add-trustabl-action

Conversation

@joshua-trustabl

Copy link
Copy Markdown

We came across your repo and we like how you've designed a comprehensive system for conducting scientific research from literature review to publication-quality PDF generation.

  1. [HIGH] Session permission mode bypasses approvals
    File: research_agent/agent.py, What it means: A ClaudeAgentOptions(.
  2. [HIGH] Claude subagent is granted filesystem-write built-ins
    File: research_agent/agent.py, What it means: This AgentDefinition grants a filesystem-write built-in (Write, Edit, MultiEdit, or NotebookEdit), letting the subagent modify files on disk.

Recommendations are based on our understanding of agent runtime reliability, some findings may be intentional. Please let us know if this was intentional or if our findings are helpful so we can improve the accuracy of the scanner.

Best,
Trustabl.ai
Open-source AI agent reliability scanner (runs locally, GitHub Action)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant