> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flintai.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Over-privileged agent

> Agent role, backstory, or system prompt grants capabilities beyond its functional need

Agent role, backstory, or system prompt grants capabilities beyond its functional need

## How to resolve

Restrict the agent's system prompt and role to only necessary capabilities. Remove broad permissions ('full access', 'admin') from agent instructions.

## Risk

**Governance/Compliance**

This vulnerability falls under [ASI03:2026 — Identity and Privilege Abuse](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/) in the OWASP Top 10 for Agentic Applications. Agents inherit, reuse, or escalate identities and credentials beyond their functional scope.

**Security**

Agent role, backstory, or system prompt grants capabilities beyond its functional need. If exploited, this can compromise the agent's integrity, confidentiality, or availability, potentially affecting downstream systems and data.

## Explanation

Agent role, backstory, or system prompt grants capabilities beyond its functional need. This falls under ASI03 (Identity and Privilege Abuse): Agents inherit, reuse, or escalate identities and credentials beyond their functional scope.

## Specifications

**Trigger**

* Agent scan detects agent role, backstory, or system prompt grants capabilities beyond its functional need

The scanner looks for patterns such as:

* allow\_delegation=True with no scope restriction
* admin or superuser role in backstory
* full filesystem access declared in system prompt

**Severity**

* HIGH

**Applies to**: Agent