raghu@dark-factory :~/kb/excessive-agency $ cat

Excessive agency

An agentic system granted more autonomy, permissions, or file-system reach than its task actually requires, so a bug or compromise can take damaging actions such as reading and uploading a user's entire home directory.

grounded in: Trend theme: AI coding CLI tools silently uploading users' entire home directories to vendor servers (agent data-egress as the week's dominant fear); the established OWASP LLM Top 10 'Excessive Agency

Connected concepts

Agent security, Ambient authority, Lethal Trifecta, Blast-radius containment, Capability-Based Security

Explore it live in the knowledge graph →