Findings
Source: app.qpoint.io/v2/findings — v2 Figma (Agent Transition)
Findings are lensed through the perspective of specific compliance frameworks. Select one or more framework to see findings per that framework.
Severity | Agent | Relevant Frameworks | |
|---|---|---|---|
High | Egress to non-allowlisted destination 127.0.0.1 contacted by 6 agents | Codex | OWASP LLM Top 10 |
High | Credential in outbound prompt AWS secret key detected in request body | Claude Code | OWASP LLM Top 10Mitre Atlas |
Medium | Unapproved MCP server mcp.unknown-vendor.io registered by 2 agents | Cursor | OWASP Agentic |
Medium | Tool invoked without approval shell.exec called before human sign-off | Codex | OWASP AgenticOWASP LLM Top 10 |
Low | Missing runtime telemetry 2 sessions reported no spend telemetry | Windsurf | NIST AI RMF |
Info | New agent observed windsurf-helper first seen on host mkt-03 | Windsurf | NIST AI RMFMitre Atlas |