Evidence check report

Subject: /opt/agentgate/examples/action-verify
Generated: 2026-09-23T05:20:06.051Z
Policy version: agentgate.policy/v1

FINDINGS

Check coverage

Item	Result
Checks run	(none)
Checks that failed to run	None
Files read	(none)
Files that could not be parsed	None
Malformed input	None

Findings (2)

Severity	Rule	Location	Finding and reason
MEDIUM	AG-MCP-010	.mcp.json	server filesystem runs npx without a pinned version forbidden by policy
MEDIUM	AG-MCP-014	.mcp.json	server filesystem is given a filesystem root forbidden by policy

Policy used

{
  "version": "agentgate.policy/v1",
  "threshold": "high",
  "pinPackages": false,
  "measuredEvidence": [],
  "requiredScanners": [],
  "forbiddenRules": [
    "AG-MCP-010",
    "AG-MCP-014"
  ],
  "forbiddenSeverities": [
    "critical"
  ],
  "forbiddenServers": [],
  "forbiddenTools": []
}