AG-010: No Rate Limiting on High-Risk Tools

What this rule means

A destructive or egress-capable tool has no call ceiling. Correctness is not the issue — volume is: the same tool call is harmless once and a breach ten thousand times.

Why it matters

Machine-speed repetition is what turns a single agent mistake into an incident; exfiltration and deletion both scale linearly with unmetered tool calls.

How to fix it

Add a per-session and per-tool call budget on destructive/egress tools, and alert on the budget rather than on each call.

Detect it

pip install lucin
lucin scan .                  # all rules
lucin explain AG-010          # this rule, in your terminal

Findings carry a file:line and, where the rule supports it, a witness path showing the flow that triggered it. Precision and recall for the whole rule set, with the commands that regenerate them, are on the benchmarks page — and the gaps are on limits.

← All detection rules