{
  "$schema": "https://seanmcquilling.com/schemas/agent-run-plan.schema.json",
  "version": 2,
  "name": "Review an agent configuration",
  "task": "Inspect the agent configuration, identify excessive access, and produce a written review without changing files.",
  "scope": "The selected configuration file and its local documentation",
  "commands": "Read-only validation commands",
  "checks": "List every configured tool, server, credential source, and external destination, then confirm the source file was not changed.",
  "approvals": "Ask before connecting to any configured service or reading environment variables.",
  "expires": "",
  "backupRequired": false,
  "sensitive": ["env"],
  "permissions": {
    "read": "allow",
    "write": "block",
    "commands": "ask",
    "network": "block",
    "secrets": "block",
    "publish": "block",
    "delete": "block"
  },
  "customActions": []
}