LLM Excessive Agency

Description

Detects LLM implementations with excessive autonomy allowing destructive operations without human approval.

What Shoulder detects

Excessive LLM agency detected: {issue_type}

How to fix

Require human approval for sensitive operations and add iteration limits.

```go
if sensitiveOperations[toolName] {
    queueForApproval(toolCall)
}
```

Learn more: https://shoulder.dev/learn/go/cwe-862/llm-excessive-agency

Applies to

Languages

🐹 Go

References

Documentation ↗ OWASP ↗ Learn about CWE-862

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=go-llm-excessive-agency .