sbox
Warn
Audited by Socket on Mar 5, 2026
1 alert found:
AnomalyAnomalyapps/fumadocs/src/app/api/v1/tools/[toolName]/route.ts
LOWAnomalyLOW
apps/fumadocs/src/app/api/v1/tools/[toolName]/route.ts
The endpoint is a conventional and valid pattern for dispatching to a tool registry with input validation on the tool name. The primary risk stems from the executeAgentTool implementation and whether tools are sandboxed, permissioned, and auditable. Ensure strong authorization, tool isolation, input constraints per tool, and robust auditing. Implement rate limiting and explicit error handling to avoid information leakage.
Confidence: 68%Severity: 60%
Audit Metadata