HighAI coding agentsBLWK-AI-006

An agent permission allowlist permits arbitrary command execution

What this means

A permission allowlist that permits arbitrary execution (Bash(*), Shell(*), run_shell_command, a blanket bash: allow).

How to fix it

Scope the allowlist: replace Bash() / Shell() / Bash(curl:) / a bare “” / a blanket “bash”: “allow” with the specific, read-only commands the agent actually needs. A wildcard exec permission is a prompt-injection's path straight to your shell.

Check it yourself

Run a scan and look for BLWK-AI-006 in the results:

bulwark scan
bulwark ai scan

Installed the standalone CLI package instead of the app? The command is bulwarkctl.

References

• MITRE ATT&CK T1059

Related checks

• Project-supplied agent hooks run shell commands automatically · BLWK-AI-002
• An agent is configured to bypass all permission prompts · BLWK-AI-007
• Project MCP servers are set to auto-enable without prompting · BLWK-AI-008
• VS Code chat auto-approve (“YOLO mode”) is enabled · BLWK-AI-009
• VS Code Workspace Trust is disabled · BLWK-AI-010
• A VS Code task runs automatically when the folder is opened · BLWK-AI-011