> ## Documentation Index
> Fetch the complete documentation index at: https://docs.switchagents.ai/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> These docs moved from docs.flintai.dev to docs.switchagents.ai. Use docs.switchagents.ai for every link and request.
> To search these docs from an AI tool, connect the MCP server at https://docs.switchagents.ai/mcp. The page index is at https://docs.switchagents.ai/llms.txt.

# Agent runtime rules

> Runtime behavior vulnerabilities in agent execution, memory, communication, and control flow

Agent runtime rules cover runtime behavior vulnerabilities in agent execution, memory, communication, and control flow.

* [Arbitrary code execution](/switch-trust/rules/agent-arbitrary-code-execution)
* [Confused deputy](/switch-trust/rules/agent-confused-deputy)
* [Cross-session contamination](/switch-trust/rules/agent-cross-session-contamination)
* [Direct prompt injection](/switch-trust/rules/agent-direct-prompt-injection)
* [Excessive tool permissions](/switch-trust/rules/agent-excessive-tool-permissions)
* [Goal manipulation via RAG](/switch-trust/rules/agent-goal-manipulation-via-rag)
* [Hardcoded credentials in agents](/switch-trust/rules/agent-hardcoded-credentials)
* [Indirect prompt injection via tool output](/switch-trust/rules/agent-indirect-prompt-injection-via-tool-output)
* [Inherited session abuse](/switch-trust/rules/agent-inherited-session-abuse)
* [Known vulnerable dependency](/switch-trust/rules/agent-known-vulnerable-dependency)
* [Memory poisoning](/switch-trust/rules/agent-memory-poisoning)
* [Missing action confirmation](/switch-trust/rules/agent-missing-action-confirmation)
* [Missing agent monitoring](/switch-trust/rules/agent-missing-agent-monitoring)
* [Missing auth on endpoint](/switch-trust/rules/agent-missing-auth-on-endpoint)
* [Missing behavioral guardrails](/switch-trust/rules/agent-missing-behavioral-guardrails)
* [Missing blast radius limit](/switch-trust/rules/agent-missing-blast-radius-limit)
* [Missing circuit breaker](/switch-trust/rules/agent-missing-circuit-breaker)
* [Missing kill switch](/switch-trust/rules/agent-missing-kill-switch)
* [No human in the loop](/switch-trust/rules/agent-no-human-in-the-loop)
* [Over-privileged agent](/switch-trust/rules/agent-over-privileged-agent)
* [Path traversal in file tools](/switch-trust/rules/agent-path-traversal-in-file-tools)
* [Persistent memory no filtering](/switch-trust/rules/agent-persistent-memory-no-filtering)
* [Persuasive agent language](/switch-trust/rules/agent-persuasive-agent-language)
* [Poisoned tool descriptor](/switch-trust/rules/agent-poisoned-tool-descriptor)
* [RAG database poisoning](/switch-trust/rules/agent-rag-database-poisoning)
* [Sensitive data in output](/switch-trust/rules/agent-sensitive-data-in-output)
* [Unauthenticated agent communication](/switch-trust/rules/agent-unauthenticated-agent-communication)
* [Unbounded agent loop](/switch-trust/rules/agent-unbounded-agent-loop)
* [Unchecked agent delegation](/switch-trust/rules/agent-unchecked-agent-delegation)
* [Unencrypted agent channel](/switch-trust/rules/agent-unencrypted-agent-channel)
* [Unpinned dependencies](/switch-trust/rules/agent-unpinned-dependencies)
* [Unsafe code generation](/switch-trust/rules/agent-unsafe-code-generation)
* [Unsafe deserialization](/switch-trust/rules/agent-unsafe-deserialization)
* [Untrusted external tool](/switch-trust/rules/agent-untrusted-external-tool)
* [Unvalidated agent message](/switch-trust/rules/agent-unvalidated-agent-message)
* [Unvalidated tool input parameters](/switch-trust/rules/agent-unvalidated-tool-input-parameters)