A static AST scan of three open-source TypeScript agent codebases found 669 tool calls with real side effects. 553 had no guard of any kind. Here is the methodology, the numbers, and the false positives I had to kill to trust them.
What I found scanning 3 AI agent codebases for unguarded tool calls
