audit

What audit does on Lint

AI agents call audit to retrieve information from Lint without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why audit is rated Low

cargo audit is a security auditing tool that scans Rust dependencies for known vulnerabilities and returns information. It performs no write, destructive, execute, or financial operations—it only retrieves and reports vulnerability data in a structured format. This is a passive read operation with no side effects on the system or codebase.

From the tool's definition Tool name 'audit' and description 'returns structured vulnerability data' indicate this runs a security scanning tool (cargo audit) that reports vulnerabilities without modifying code or systems. The output is read-only diagnostic information.

The rule that runs audit safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Lint, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For audit, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "audit": {}
  }
}

Questions about audit