audit

What audit does on Go

AI agents call audit to retrieve information from Go without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why audit is rated Low

cargo audit is a standard Rust ecosystem vulnerability scanner that analyzes dependencies and reports findings. It performs no writes, deletions, or executable actions on the codebase. The tool only queries and returns diagnostic data, matching the Read category profile of retrieve/query operations with no side effects.

From the tool's definition Tool description states 'Runs cargo audit and returns structured vulnerability data' — audit is a read-only security scanning operation that retrieves and reports vulnerabilities without modifying code, dependencies, or system state.

The rule that runs audit safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Go, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For audit, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "audit": {}
  }
}

Questions about audit