> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flintai.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Excessive tool permissions

> Agent granted tools far beyond what its stated goal requires — violates least-agency principle

Agent granted tools far beyond what its stated goal requires — violates least-agency principle

## How to resolve

Apply least-privilege principle: grant only tools the agent's stated purpose requires. Classify tools by risk level and restrict high-impact tools (send, delete, execute) to trusted contexts.

## Risk

**Governance/Compliance**

This vulnerability falls under [ASI02:2026 — Tool Misuse and Exploitation](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/) in the OWASP Top 10 for Agentic Applications. Agent uses legitimate tools in unsafe ways due to over-privilege, bad input, or poisoned descriptors.

**Security**

Agent granted tools far beyond what its stated goal requires — violates least-agency principle. If exploited, this can compromise the agent's integrity, confidentiality, or availability, potentially affecting downstream systems and data.

## Explanation

Agent granted tools far beyond what its stated goal requires — violates least-agency principle. This falls under ASI02 (Tool Misuse and Exploitation): Agent uses legitimate tools in unsafe ways due to over-privilege, bad input, or poisoned descriptors.

## Specifications

**Trigger**

* Agent scan detects agent granted tools far beyond what its stated goal requires — violates least-agency principle

The scanner looks for patterns such as:

* shell tool registered on narrow-purpose agent
* broad filesystem or DB access for read-only task
* admin-level tools granted to customer-facing agent

**Severity**

* HIGH

**Applies to**: Agent