AGENTFORCE-API-01: External Callout Injection
🔴 High · Network Security
AI Input mapped directly into an external API structure risks Server Side Request Forgery (SSRF) or Data Leakage.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-API-01 |
| Severity | High |
| Category | Network Security |
| Compliance | SOC2_CC7 |
Remediation
Hardcode API endpoints. Never allow agent-provided values in URL paths or headers.