aci

Security Findings (142)

• MediumAS-003

  🔀Scope Mismatch

  set_shortlist_alert:tool name "set_shortlist_alert" implies local write operation but only remote/network-class permissions were detected

  Fix: Ensure tool names, descriptions, and permission declarations are internally consistent. Use explicit naming conventions that fully reflect actual capabilities.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×30

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  searchfetchsearch_facilitiesget_grid_scoreboardsemantic_searchsearch_intelligenceget_market_contextget_iso_contextget_retirement_headroomrank_sitesset_shortlist_alertsuggest_reallocationget_grid_dataget_changessave_sitelist_saved_sitesset_market_alertexport_datasetanalyze_siteget_climate_intelgenerate_site_analysiscompare_sitesget_fiber_readinessget_renewable_energywhy_dchubget_dchub_recommendationrank_marketsclaim_free_keybind_emailunlock_more_data

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-002

  ⚠️Excessive Permissions ×35

  declared capabilities: network access

  searchfetchget_grid_scoreboardget_market_contextget_iso_contextget_grid_dataget_changessave_siteget_dchub_recommendationrank_markets

  declared capabilities: network access, filesystem access

  search_facilitieslist_saved_sitesexport_dataset

  declared capabilities: network access, database access

  semantic_searchsearch_intelligence

  declared capabilities: filesystem access, HTTP requests

  get_retirement_headroom

  declared capabilities: HTTP requests

  rank_sitesset_shortlist_alertsuggest_reallocationanalyze_siteget_climate_intelcompare_sitesget_fiber_readinessget_renewable_energybind_emailunlock_more_data

  declared capabilities: database access

  discover_toolsget_disaster_riskget_backup_status

  declared capabilities: filesystem access

  get_facility_risk_deltaget_metro_fiber

  declared capabilities: network access, database access, HTTP requests

  set_market_alert

  declared capabilities: network access, HTTP requests

  generate_site_analysisclaim_free_key

  declared capabilities: network access, filesystem access, database access

  why_dchub

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×73

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  searchfetchsearch_facilitiesget_facilityget_market_intelget_market_dcpi_rankpredict_market_trajectoryget_gas_indexget_gas_economicsget_grid_scoreboardcompare_isosget_intelligence_indexlist_transactionsget_newssemantic_searchsearch_intelligenceget_market_contextget_iso_contextget_pipelineget_power_pipelineget_interconnection_queueget_refined_queueget_retirement_headroomanalyze_parcelrank_sitesdiscover_toolssave_to_shortlistget_shortlistset_shortlist_alertsuggest_reallocationget_grid_dataget_changesget_facility_risk_deltasave_sitelist_saved_sitesset_market_alertsubscribe_digestset_site_alertexport_datasetanalyze_siteget_composite_site_scoreget_disaster_riskget_climate_intelgenerate_site_analysiscompare_sitesget_infrastructureget_fiber_intelget_fiber_readinessget_metro_fiberget_energy_pricesget_renewable_energyget_tax_incentivesget_water_riskget_grid_intelligenceget_gas_intelligenceget_agent_registryget_backup_statuswhy_dchubget_dchub_recommendationrank_marketsfind_alternativesscore_facilityai_capacity_indexhyperscaler_dealssite_selection_canvasgrid_transition_radardeal_autopsyplan_fiber_leadincluster_sites_by_latencyclaim_free_keybind_emailrecover_my_keyunlock_more_data

  Fix: Review and remediate the identified issue.

• InfoAS-010

  🔑Insecure Secret Handling ×3

  input parameter "max_tokens" accepts a credential (informational; not evidence of insecure handling)

  get_market_contextget_iso_context

  input parameter "api_key" accepts a credential (informational; not evidence of insecure handling)

  bind_email

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.