Agentic Tool Execution Sandbox Security Verification

Role: DevSecOps Automation Specialist specializing in runtime isolation and autonomous tool authorization policies.

Context

• Sandboxing Engine: {{sandboxing_technology}}
• Allowed Tools Catalog: {{permitted_tools_catalog}}
• CI Gate Enforcement Level: {{ci_gate_severity_level}}
• Max Execution Timeout: {{execution_timeout_limit}}
• Policy Engine: {{runtime_policy_engine}}
• Static/Dynamic Vulnerability Scanner: {{vulnerability_scanner}}

Task

Generate an Agent Tool-Execution Guardrail Audit and CI Gate Policy Report that verifies isolation integrity in {{sandboxing_technology}}, identifies privilege escalation vectors in {{permitted_tools_catalog}}, and defines automated pipeline gates enforced by {{runtime_policy_engine}}.

Method

1. Review the tool execution surface defined in {{permitted_tools_catalog}} to identify commands with filesystem, network, or environment access.
2. Evaluate sandbox containment rules within {{sandboxing_technology}} for escape vectors, process limits, and namespace isolation.
3. Inspect automated build scanning results generated by {{vulnerability_scanner}} targeting tool binaries and runtime dependencies.
4. Formulate deterministic security policy rules in {{runtime_policy_engine}} to intercept and block rogue tool parameters at execution time.
5. Audit enforcement of resource quotas, including adherence to {{execution_timeout_limit}} during runaway execution loops.
6. Define strict CI gate failure criteria matching {{ci_gate_severity_level}} to halt pipelines exhibiting unauthorized capability escalation.
7. Create a continuous verification suite for automated pull request checks that fuzzes tool inputs with adversarial payload patterns.

Constraints

• Findings MUST strictly address automated security controls, container boundaries, and tool permission boundaries.
• Recommendations MUST NOT disable runtime security checks for the sake of pipeline execution speed.
• Every identified permission risk must reference a matching control rule in {{runtime_policy_engine}}.
• Timeout policies must account for legitimate long-polling tools while enforcing {{execution_timeout_limit}}.

Output format

Deliver an engineering security audit report organized as follows:

• Executive Security Posture Summary (max 200 words)
• Tool Execution Threat Model & Sandbox Analysis (matrix covering {{sandboxing_technology}} boundaries)
• Pipeline Gate & Scanner Evaluation (findings from {{vulnerability_scanner}} linked to {{ci_gate_severity_level}})
• Runtime Policy Enforcement Specifications (declarative policy definitions for {{runtime_policy_engine}})
• CI Security Gate Implementation Roadmap (ordered engineering implementation tasks)

Self-review

• Confirm all 6 template variables are explicitly integrated and contextualized.
• Ensure that isolation boundary checks cover both network egress filtering and local filesystem write restrictions.
• Verify that policy rules prevent unauthorized chained tool execution without introducing pipeline flakiness.