__T_blog_articles_ai_agent_security_json_118_001__ • AI / Agent

__T_blog_articles_ai_agent_security_json_122_001__

__T_blog_articles_ai_agent_security_json_135_001__

__T_blog_articles_ai_agent_security_json_136_001__

__T_blog_articles_ai_agent_security_json_137_001__

• __T_blog_articles_ai_agent_security_json_139_001__
• __T_blog_articles_ai_agent_security_json_140_001__
• __T_blog_articles_ai_agent_security_json_141_001__
• __T_blog_articles_ai_agent_security_json_142_001__
• __T_blog_articles_ai_agent_security_json_143_001__

__T_blog_articles_ai_agent_security_json_166_001__

__T_blog_articles_ai_agent_security_json_167_001____T_blog_articles_ai_agent_security_json_167_002____T_blog_articles_ai_agent_security_json_167_003____T_blog_articles_ai_agent_security_json_167_004____T_blog_articles_ai_agent_security_json_167_005____T_blog_articles_ai_agent_security_json_167_006____T_blog_articles_ai_agent_security_json_167_007__

__T_blog_articles_ai_agent_security_json_210_001__

__T_blog_articles_ai_agent_security_json_211_001__

__T_blog_articles_ai_agent_security_json_212_001____T_blog_articles_ai_agent_security_json_212_002__

__T_blog_articles_ai_agent_security_json_213_001__gem signin__T_blog_articles_ai_agent_security_json_213_002____T_blog_articles_ai_agent_security_json_213_003____T_blog_articles_ai_agent_security_json_213_004__

__T_blog_articles_ai_agent_security_json_214_001__

__T_blog_articles_ai_agent_security_json_215_001__

__T_blog_articles_ai_agent_security_json_217_001__

__T_blog_articles_ai_agent_security_json_218_001__

__T_blog_articles_ai_agent_security_json_219_001____T_blog_articles_ai_agent_security_json_219_002____T_blog_articles_ai_agent_security_json_219_003____T_blog_articles_ai_agent_security_json_219_004__

__T_blog_articles_ai_agent_security_json_220_001__

__T_blog_articles_ai_agent_security_json_221_001__

__T_blog_articles_ai_agent_security_json_255_001__

__T_blog_articles_ai_agent_security_json_257_001__

__T_blog_articles_ai_agent_security_json_258_001__

__T_blog_articles_ai_agent_security_json_259_001__

__T_blog_articles_ai_agent_security_json_260_001__

__T_blog_articles_ai_agent_security_json_261_001__

__T_blog_articles_ai_agent_security_json_262_001____T_blog_articles_ai_agent_security_json_262_002____T_blog_articles_ai_agent_security_json_262_003__

__T_blog_articles_ai_agent_security_json_264_001__

__T_blog_articles_ai_agent_security_json_265_001__

{
  "id": "call_9c10",
  "type": "function",
  "function": {
    "name": "http_request",
    "arguments": "{\"method\":\"POST\",\"url\":\"https://rubygems.org/api/v1/gems\",\"body_b64\":\"...\"}"
  }
}

__T_blog_articles_ai_agent_security_json_277_001__JSON.parse__T_blog_articles_ai_agent_security_json_277_002__fetch__T_blog_articles_ai_agent_security_json_277_003__

__T_blog_articles_ai_agent_security_json_278_001__

__T_blog_articles_ai_agent_security_json_279_001____T_blog_articles_ai_agent_security_json_279_002____T_blog_articles_ai_agent_security_json_279_003____T_blog_articles_ai_agent_security_json_279_004____T_blog_articles_ai_agent_security_json_279_005__

__T_blog_articles_ai_agent_security_json_281_001__

__T_blog_articles_ai_agent_security_json_282_001__

__T_blog_articles_ai_agent_security_json_321_001__

__T_blog_articles_ai_agent_security_json_322_001__

{
  "type": "function",
  "function": {
    "name": "http_get",
    "description": "Fetch a public documentation page. Only call for allowlisted hosts.",
    "parameters": {
      "type": "object",
      "additionalProperties": false,
      "required": ["url"],
      "properties": {
        "url": {
          "type": "string",
          "pattern": "^https://(docs\\.example\\.com|help\\.example\\.com)/"
        }
      }
    }
  }
}

__T_blog_articles_ai_agent_security_json_344_001__

{
  "name": "http_get",
  "arguments": "{\"url\":\"https://rubygems.org/api/v1/gems\"}"
}

__T_blog_articles_ai_agent_security_json_352_001__

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "additionalProperties": false,
  "required": ["allow_tools", "http_get"],
  "properties": {
    "allow_tools": {
      "type": "array",
      "items": { "type": "string", "enum": ["http_get", "read_file"] }
    },
    "deny_tools": {
      "type": "array",
      "items": { "type": "string", "enum": ["publish_package", "shell"] }
    },
    "http_get": {
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "url_pattern": { "type": "string" }
      }
    }
  }
}

__T_blog_articles_ai_agent_security_json_379_001__publish_package__T_blog_articles_ai_agent_security_json_379_002__shell__T_blog_articles_ai_agent_security_json_379_003__

__T_blog_articles_ai_agent_security_json_381_001__

__T_blog_articles_ai_agent_security_json_382_001__

1. 1
   __T_blog_articles_ai_agent_security_json_387_001__

   __T_blog_articles_ai_agent_security_json_388_001__

2. 2
   __T_blog_articles_ai_agent_security_json_394_001__

   __T_blog_articles_ai_agent_security_json_395_001__additionalProperties: false__T_blog_articles_ai_agent_security_json_395_002__

3. 3
   __T_blog_articles_ai_agent_security_json_401_001__

   __T_blog_articles_ai_agent_security_json_402_001__

4. 4
   __T_blog_articles_ai_agent_security_json_408_001__

   __T_blog_articles_ai_agent_security_json_409_001__

5. 5
   __T_blog_articles_ai_agent_security_json_415_001__

   __T_blog_articles_ai_agent_security_json_416_001__

import json
from jsonschema import Draft202012Validator

def run_tool(tool_call, schema, policy):
    name = tool_call["function"]["name"]
    if name not in policy["allow_tools"]:
        return {"ok": False, "error": "tool_not_allowed", "name": name}
    raw = tool_call["function"]["arguments"]
    try:
        args = json.loads(raw)
    except json.JSONDecodeError as exc:
        return {"ok": False, "error": "invalid_json", "detail": str(exc)}
    validator = Draft202012Validator(schema)
    errors = sorted(validator.iter_errors(args), key=lambda e: list(e.path))
    if errors:
        return {
            "ok": False,
            "error": "schema_rejected",
            "fields": [".".join(str(p) for p in e.path) or "" for e in errors],
        }
    return {"ok": True, "name": name, "args": args}

__T_blog_articles_ai_agent_security_json_444_001__

__T_blog_articles_ai_agent_security_json_445_001____T_blog_articles_ai_agent_security_json_445_002____T_blog_articles_ai_agent_security_json_445_003__

__T_blog_articles_ai_agent_security_json_447_001__

__T_blog_articles_ai_agent_security_json_448_001__

1. 1
   __T_blog_articles_ai_agent_security_json_453_001__

   __T_blog_articles_ai_agent_security_json_454_001____T_blog_articles_ai_agent_security_json_454_002____T_blog_articles_ai_agent_security_json_454_003__

2. 2
   __T_blog_articles_ai_agent_security_json_460_001__

   __T_blog_articles_ai_agent_security_json_461_001__JSON Schema__T_blog_articles_ai_agent_security_json_461_002__

3. 3
   __T_blog_articles_ai_agent_security_json_467_001__

   __T_blog_articles_ai_agent_security_json_468_001__JSON Diff__T_blog_articles_ai_agent_security_json_468_002__

4. 4
   __T_blog_articles_ai_agent_security_json_474_001__

   __T_blog_articles_ai_agent_security_json_475_001____T_blog_articles_ai_agent_security_json_475_002____T_blog_articles_ai_agent_security_json_475_003__

__T_blog_articles_ai_agent_security_json_480_001__

__T_blog_articles_ai_agent_security_json_481_001__

__T_blog_articles_ai_agent_security_json_482_001__

__T_blog_articles_ai_agent_security_json_483_001__

__T_blog_articles_ai_agent_security_json_484_001__

__T_blog_articles_ai_agent_security_json_485_001__

__T_blog_articles_ai_agent_security_json_486_001__

__T_blog_articles_ai_agent_security_json_487_001__

__T_blog_articles_ai_agent_security_json_488_001__

__T_blog_articles_ai_agent_security_json_489_001__

__T_blog_articles_ai_agent_security_json_490_001__

__T_blog_articles_ai_agent_security_json_492_001__

__T_blog_articles_ai_agent_security_json_493_001__

__T_blog_articles_ai_agent_security_json_494_001__

__T_blog_articles_ai_agent_security_json_495_001__

__T_blog_articles_ai_agent_security_json_519_001__