xgrnetwork-xdala-workflow-builder

Security Findings (129)

• HighAS-003

  🔀Scope Mismatch ×9

  tool name "search_transactions" implies read-only operation but declares exec permission

  search_transactions

  tool name "get_session_receipt_logs" implies read-only operation but declares exec permission

  get_session_receipt_logs

  tool name "get_xrc729_authority" implies read-only operation but declares exec permission

  get_xrc729_authority

  tool name "find_startable_xdala_workflows" implies read-only operation but declares exec permission

  find_startable_xdala_workflows

  tool name "get_xdala_bundle_deploy_result" implies read-only operation but declares exec permission

  get_xdala_bundle_deploy_result

  tool name "get_xdala_session_start_handoff" implies read-only operation but declares exec permission

  get_xdala_session_start_handoff

  tool name "get_xdala_session_start_result" implies read-only operation but declares exec permission

  get_xdala_session_start_result

  tool name "list_recent_operations" implies read-only operation but declares exec permission

  list_recent_operations

  tool name "get_xdala_process_mermaid" implies read-only operation but declares exec permission

  get_xdala_process_mermaid

  Fix: Ensure tool names, descriptions, and permission declarations are internally consistent. Use explicit naming conventions that fully reflect actual capabilities.

• LowAS-002

  ⚠️Excessive Permissions ×3

  input schema exposes 17 properties (threshold: 10)

  search_transactions

  input schema exposes 22 properties (threshold: 10)

  create_xdala_session_start_handoff

  input schema exposes 11 properties (threshold: 10)

  get_xdala_process_mermaid

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×17

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  search_transactionsfind_latest_xdala_sessionget_recent_xdala_sessionsget_xdala_session_detailget_session_receipt_logsget_xrc729_authorityfind_startable_xdala_workflowscreate_operation_handoffcreate_xdala_bundle_deploy_handoffget_xdala_bundle_deploy_resultcreate_xdala_session_start_handoffget_xdala_session_start_handoffcancel_xdala_session_start_handoffget_xdala_session_start_resultlist_recent_operationsget_xdala_process_mermaidvalidate_xdala_blueprint

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×80

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  get_chain_statusget_latest_blockget_account_live_stateget_transaction_evidenceget_transaction_receiptsearch_transactionsget_recent_value_transfersget_account_transactionsget_block_transactionsget_transaction_statsget_session_transactionsget_session_status_livelist_wakeup_targets_by_addressresolve_wakeup_payload_schemaget_sessions_overviewfind_latest_xdala_sessionget_latest_session_payloadget_recent_xdala_sessionslist_xdala_session_ownerslist_xdala_sessionslist_xdala_session_idsget_xdala_session_detailget_xdala_session_statsget_xdala_session_timeseriesget_xdala_step_statsget_xdala_payload_key_statsget_xdala_payload_term_statsget_xdala_payload_field_value_statsget_xdala_active_sessions_timeseriesget_session_receipt_logsget_xgr_core_addressesget_xgr_circulating_supplyestimate_xdala_rule_gasget_xrc729_authorityfind_startable_xdala_workflowslist_xrc_contractsget_xrc_contractlist_xrc_eventsget_xrc_contract_eventsget_xrc729_ostc_stateget_xrc_owner_summaryread_xrc729_ostc_jsonread_xrc137_rule_jsonresolve_xrc729_process_graphget_xrc_usagelist_xrc_process_sessionsfind_reusable_xrc137_rulesget_unused_xrc137_rulesget_xrc_failure_statscreate_operation_handoffget_operation_statuscancel_operation_handoffcreate_xdala_bundle_deploy_handoffget_xdala_bundle_deploy_handoffget_xdala_bundle_deploy_resultcancel_xdala_bundle_deploy_handoffcreate_xdala_session_start_handoffget_xdala_session_start_handoffcancel_xdala_session_start_handoffget_xdala_session_start_resultlist_recent_operationsget_xdala_process_mermaidlist_xgr_standardslist_xgr_docsget_xgr_docget_xdala_authoring_rulesget_xgr_standard_referenceget_xgr_standard_schemalist_xgr_standard_examplesget_xgr_standard_exampleget_xgr_multibundle_referenceget_xgr_multibundle_schemaget_xgr_session_start_schemavalidate_xgr_session_startvalidate_xgr_session_start_handoffvalidate_xgr_multibundlevalidate_xdala_bundlevalidate_xrc137_authoringvalidate_xdala_rulesvalidate_xdala_blueprint

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×18

  declared capabilities: code/command execution, network access

  search_transactions

  declared capabilities: filesystem access

  get_account_transactions

  declared capabilities: database access, HTTP requests

  find_latest_xdala_sessionget_recent_xdala_sessions

  declared capabilities: HTTP requests

  get_xdala_session_detailvalidate_xdala_blueprint

  declared capabilities: code/command execution

  get_session_receipt_logsget_xrc729_authorityget_xdala_bundle_deploy_resultget_xdala_session_start_handoffcancel_xdala_session_start_handoffget_xdala_session_start_resultlist_recent_operations

  declared capabilities: code/command execution, HTTP requests

  find_startable_xdala_workflows

  declared capabilities: code/command execution, network access, filesystem access, HTTP requests

  create_operation_handoffcreate_xdala_session_start_handoff

  declared capabilities: code/command execution, network access, filesystem access

  create_xdala_bundle_deploy_handoff

  declared capabilities: code/command execution, filesystem access, HTTP requests

  get_xdala_process_mermaid

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-010

  🔑Insecure Secret Handling ×2

  input parameter "secret" accepts a credential (informational; not evidence of insecure handling)

  get_operation_statuscancel_operation_handoff

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.