Security · pen-test
Penetration test scope
This is a test scope — not a completed pen-test PDF with invented findings. Full reports are shared under NDA when an independent engagement exists.
01
In scope (agent money)
- Prompt injection → payment tools
- Confused deputy / cross-tenant write
- SSRF via tool arguments
- Secret echo in args or logs
- Limit drain loops
- Missing confirm / confirm replay
- Kill switch effectiveness
- Receipt signature tamper checks
02
Out of scope on this public Worker
- Live money (this Worker does not move money)
- Testing rail partners without their written authorization
- Staff social engineering
Related: threat model · money_v1 · vendor pack
https://abcp.noetfield.com · doctrine v2.8