Blast radius, exposure ranking and containment for flagged agents.
If this agent were compromised, here is everything it can reach.
23
agents could be reached
Payment Anomaly Watcher
Sensitive data read + external egress + 2 descendants
2 direct descendants in lineage · 21 reachable via shared tools
Scored on data sensitivity, egress paths and descendant count.
| # | Agent | Score | Reason | Status |
|---|---|---|---|---|
| 1 | Payment Anomaly Watcher | 92 | High: Sensitive data read + external egress + 2 descendants | Shadow |
| 2 | Wire Approval Helper | 88 | High: Payment initiation path with no owner | Shadow |
| 3 | Claims Triage Bot (fork-2) | 76 | High: Clone with PHI access and drifted prompt | Clone of Claims Triage Bot |
| 4 | Atlas Orchestrator | 74 | High: Orchestrator privileges + 11 descendants | Sanctioned |
| 5 | Sanctions List Watcher | 71 | High: Unowned agent with external egress | Shadow |
| 6 | Atlas Orchestrator (dev-fork) | 69 | High: Clone running against production credentials | Clone of Atlas Orchestrator |
| 7 | Claims Triage Bot | 68 | High: PHI read + 3 descendants | Sanctioned |
| 8 | Ledger Reconciler | 61 | Medium: Financial ledger write access | Sanctioned |
Feeds context into your existing SIEM/SOAR — we make your security stack smarter, not replace it.