证据体检报告

对象:/home/runner/work/agentgate/agentgate/examples/action-verify
生成时间:2026-10-31T11:12:02.978Z
策略版本:agentgate.policy/v1

FINDINGS

检查覆盖

项目	结果
执行的检查	(无)
未能执行的检查	无
读到的文件	(无)
无法解析的文件	无
格式错误的输入	无

发现(2)

级别	规则	位置	结论与原因
MEDIUM	AG-MCP-010	.mcp.json	server filesystem runs npx without a pinned version forbidden by policy
MEDIUM	AG-MCP-014	.mcp.json	server filesystem is given a filesystem root forbidden by policy

使用的策略

{
  "version": "agentgate.policy/v1",
  "threshold": "high",
  "pinPackages": false,
  "measuredEvidence": [],
  "requiredScanners": [],
  "forbiddenRules": [
    "AG-MCP-010",
    "AG-MCP-014"
  ],
  "forbiddenSeverities": [
    "critical"
  ],
  "forbiddenServers": [],
  "forbiddenTools": []
}