AGENTFORCE-AF-16: Mule A2A Authorizer Allows Every Request
🔴 High · MuleSoft Agent Fabric
Detects A2A task-authorizer flows that approve every task: a wildcard verb / skill list, or a constant allow with no check of the caller's identity, token or requested skill.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-AF-16 |
| Severity | High |
| Category | MuleSoft Agent Fabric |
Remediation
Authorize each task: validate the caller's token (issuer, audience, expiry), map the caller to the skills it may use, and reject the task (raise an error) when the requested skill is not allowed.