AGENTFORCE-RD-02: Variable State Condition Evasion

🟡 Medium · Runtime Capability Drift

Detects when security-critical ConversationContextVariables (authentication status, user clearance, financial limits) are declared in the AiAuthoringBundle but never referenced in deterministic Agent Script transition conditions (-> if @variables.X). Without deterministic evaluation, attackers can bypass authorization checks through prompt manipulation.

Details

Field	Value
Rule ID	AGENTFORCE-RD-02
Severity	Medium
Category	Runtime Capability Drift

Remediation

Refer to the SquireX documentation for remediation guidance specific to AGENTFORCE-RD-02.

See Also

• Rule catalog index
• SquireX scan documentation