AG-026: Ambient Authority

What this rule means

Agent runs with elevated privileges (no Docker, privileged mode, fully autonomous).

Why it matters

AutoGen use_docker=False: generated code runs as host user with full permissions.

How to fix it

Enable container isolation, set human_input_mode, drop privileges.

Detect it

pip install lucin
lucin scan .                  # all rules
lucin explain AG-026          # this rule, in your terminal

Findings carry a file:line and, where the rule supports it, a witness path showing the flow that triggered it. Precision and recall for the whole rule set, with the commands that regenerate them, are on the benchmarks page — and the gaps are on limits.

← All detection rules