Here are the fictional company names, domains, usernames and email addresses used in my test environment: [PASTE LIST]
For each, tell me whether it could plausibly belong to a real organisation. Flag anything that looks like a registered domain, a real trading name, or a name common enough to collide.
Then rewrite the risky ones using reserved patterns that cannot resolve to anything real, and explain the convention so I can apply it to new fixtures myself.
I want an agent to do this task: [DESCRIBE TASK]
I am about to give it: [LIST CREDENTIALS, KEYS OR NETWORK ACCESS]
Work out the minimum access the task actually needs, then tell me what I am over-granting. For each permission, say whether it is required, optional or unnecessary, and the worst realistic outcome if misused.
Assume the agent interprets ambiguous instructions literally and pursues them enthusiastically. Do not reassure me.
Review this repository or directory listing for anything an autonomous agent could use as a credential: [PASTE FILE LIST, CONFIG OR REPO TREE]
Look for API keys, connection strings, tokens, passwords in config files, credentials in comments, committed .env files, and anything in a public path.
For each finding, say what it grants and how urgent rotation is. Then list where you would look next that I have not shown you.
My agent has this goal: [DESCRIBE GOAL]
Write an explicit stop condition and a set of tripwires, phrased as instructions I can paste into the system prompt.
It must halt and report rather than continue when it: meets a system it was not told about, is offered or asked for a credential, finds the target does not match the expected fingerprint, or would take an irreversible action.
Then tell me which of these a determined optimiser would route around.
Assume I run this agent task and it goes badly wrong: [DESCRIBE TASK AND ACCESS]
It is two weeks later and I am writing the incident report. Write it for me.
Include what the agent did in order, which control failed first, the blast radius, who had to be notified, and how long before anyone noticed. Be specific and plausible rather than dramatic.
Then list the three cheapest changes that would have prevented it.
My agent finished this task: [DESCRIBE TASK]
Here is the log: [PASTE LOG OR SUMMARY]
Identify every external system it touched, every credential it used, and anything accessed that was not needed for the stated task. Flag out-of-scope access even where nothing bad resulted.
Give me a revoke and rotate list in priority order, and tell me what I should have been logging and was not.