Skip to content

Google ADK policy index

26 rules — 14 tool · 11 agent · 1 repo

Risk score = severity_weight × confidence × 100 (engine formula; weights: low=0.15, medium=0.40, high=0.70). Higher = worse.

Id SDK/ADK Scope Applies To Policy Severity Confidence Risk Source
1 ADK-001 Google ADK tool adk_function_tool FunctionTool-wrapped function has no docstring low 0.80 12.0 tool_definition.yaml
2 ADK-002 Google ADK tool adk_function_tool FunctionTool-wrapped function has no type-annotated parameters medium 0.85 34.0 tool_definition.yaml
3 ADK-003 Google ADK tool adk_function_tool Network call has no timeout high 0.85 59.5 network.yaml
4 ADK-004 Google ADK tool adk_function_tool Path parameter used in I/O without normalization high 0.70 49.0 path_safety.yaml
5 ADK-005 Google ADK tool adk_function_tool Tool raises exceptions without a structured error contract low 0.60 9.0 error_handling.yaml
6 ADK-006 Google ADK tool adk_function_tool Mutating tool has no idempotency key medium 0.55 22.0 idempotency.yaml
7 ADK-007 Google ADK tool adk_function_tool Ambiguous tool name low 0.90 13.5 tool_definition.yaml
8 ADK-008 Google ADK agent adk_llm_agent Agent grants BashTool with no restrictive command policy high 0.75 52.5 builtin_tools.yaml
9 ADK-009 Google ADK tool adk_function_tool FunctionTool body prints to stdout low 0.70 10.5 tool_definition.yaml
10 ADK-010 Google ADK tool adk_function_tool Tool body spawns a subprocess high 0.90 63.0 shell_safety.yaml
11 ADK-011 Google ADK tool adk_function_tool Tool body calls eval/exec/compile on dynamic input high 0.90 63.0 code_execution.yaml
12 ADK-012 Google ADK tool adk_function_tool Tool fetches a caller-controlled URL (SSRF) high 0.60 42.0 ssrf.yaml
13 ADK-013 Google ADK tool adk_function_tool TypeScript FunctionTool has no description low 0.80 12.0 tool_definition.yaml
14 ADK-015 Google ADK tool adk_function_tool TypeScript FunctionTool body evaluates dynamic code high 0.90 63.0 code_execution.yaml
15 ADK-016 Google ADK tool adk_function_tool TypeScript FunctionTool fetches a caller-controlled URL (SSRF) high 0.60 42.0 ssrf.yaml
16 ADK-101 Google ADK agent adk_llm_agent LlmAgent has no description medium 0.85 34.0 agent_safety.yaml
17 ADK-102 Google ADK agent adk_llm_agent Agent with BashTool has no before_tool_callback high 0.85 59.5 agent_safety.yaml
18 ADK-103 Google ADK agent adk_llm_agent Sub-agent is granted BashTool high 0.90 63.0 agent_safety.yaml
19 ADK-104 Google ADK agent adk_llm_agent Agent has no safety_settings medium 0.75 30.0 agent_safety.yaml
20 ADK-105 Google ADK agent adk_llm_agent Agent uses web search built-in without before_tool_callback high 0.85 59.5 agent_safety.yaml
21 ADK-106 Google ADK agent adk_llm_agent Agent has a code_executor but no before_model_callback high 0.80 56.0 agent_safety.yaml
22 ADK-107 Google ADK agent adk_llm_agent Agent grants AgentTool but has no before_tool_callback high 0.70 49.0 agent_safety.yaml
23 ADK-108 Google ADK agent adk_loop_agent LoopAgent has no max_iterations medium 0.70 28.0 agent_safety.yaml
24 ADK-109 Google ADK agent adk_llm_agent TypeScript LlmAgent has no description medium 0.85 34.0 agent_safety.yaml
25 ADK-110 Google ADK agent adk_llm_agent Agent fetches web content via UrlContextTool/LoadWebPage without before_tool_callback medium 0.70 28.0 agent_safety.yaml
26 ADK-201 Google ADK repo google_adk Google ADK project ships no agent-guidance doc (AGENTS.md/CLAUDE.md) low 0.90 13.5 repo_hygiene.yaml