← Back to search

io.github.agent-polis/impact-preview

agent-polis Scanned 14d ago

Impact preview for AI agents - see what changes before any action executes.

C
74.9 / 100

Versions

0.2.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

preview_file_write
annotations: none low

Preview what a file write operation will change BEFORE executing it. Shows a diff of current vs proposed content, risk assessment, and warnings. Use this before writing to any file to see exactly what will change. Args: path: Path to the file to write content: The content to write description: Description of what this change does Returns: Impact preview showing diff, risk level, and any warnings

path str content str description str
preview_file_create
annotations: none low

Preview creating a new file BEFORE executing it. Shows what will be created, risk assessment, and any warnings. Args: path: Path where the file will be created content: The content for the new file description: Description of what this file is for Returns: Impact preview showing what will be created and risk assessment

path str content str description str
preview_file_delete
annotations: none low

Preview deleting a file BEFORE executing it. Shows what will be deleted, current contents, and risk assessment. This is a destructive operation - always preview first! Args: path: Path to the file to delete description: Reason for deletion Returns: Impact preview showing what will be lost and risk assessment

path str description str
preview_shell_command
annotations: none low

Preview a shell command BEFORE executing it. Analyzes the command for dangerous patterns and shows risk assessment. Shell commands can have system-wide effects - always preview first! Args: command: The shell command to analyze description: What this command is supposed to do Returns: Risk assessment and warnings for the command

command str description str
preview_database_query
annotations: none low

Preview a database query BEFORE executing it. Analyzes the query for dangerous operations (DELETE, DROP, TRUNCATE). Database operations can cause data loss - always preview first! Args: query: The SQL query to analyze description: What this query is supposed to do Returns: Risk assessment and classification of the query

query str description str
check_path_risk
annotations: none low

Quick check if a file path is sensitive/risky. Checks for patterns like .env, credentials, production configs, etc. Use this for a fast risk assessment before any file operation. Args: path: The file path to check Returns: Risk assessment for the path

path str

Permissions 4

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
database medium
Server uses database capabilities via: redis, sqlalchemy
env_vars low
Server uses env_vars capabilities via: os.getenv()

Scan Findings 52

low
Tool 'preview_file_delete' has no annotations annotation_checker · 100%
low
Tool 'preview_file_write' has no annotations annotation_checker · 100%
low
Tool 'preview_file_create' has no annotations annotation_checker · 100%
low
Tool 'preview_shell_command' has no annotations annotation_checker · 100%
low
Tool 'preview_database_query' has no annotations annotation_checker · 100%
low
Tool 'check_path_risk' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastapi@0.109.0 (PYSEC-2024-38) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-2jv5-9r88-3w3p) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-59g5-xgcq-4qw3) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-5rvq-cxj2-64vf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-6jv3-5f52-599m) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-mj87-hwqh-73pj) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-v9pg-7xvm-68hf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-vffw-93wf-4j4q) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (GHSA-wp53-j4wj-2cfg) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-1850) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-1851) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-1852) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-3036) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-3037) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-3038) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-3039) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-3040) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.6 (PYSEC-2026-3041) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: preview_file_write manifest_parser · 90%
info
Tool: preview_file_create manifest_parser · 90%
info
Tool: preview_file_delete manifest_parser · 90%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
Tool: preview_shell_command manifest_parser · 90%
info
Tool: preview_database_query manifest_parser · 90%
info
Tool: check_path_risk manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%