AGENTFORCE-AF-01: Broker PII Routing Without Guard

🚨 Critical · MuleSoft Agent Fabric

Detects Agent Fabric brokers that route requests to agents processing PII-classified fields without PII output guards. The broker's intelligent routing may send PII data to agents that lack masking or filtering policies.

Details

Field	Value
Rule ID	AGENTFORCE-AF-01
Severity	Critical
Category	MuleSoft Agent Fabric

Remediation

Add a PII output policy to agent '<Name>' or configure the broker to apply PII masking before routing.

See Also

• Rule catalog index
• Scanning basics
• SARIF output