Risk levels
| Score | Level | Badge colour |
|---|---|---|
| 70–100 | Critical | Red |
| 50–69 | High | Orange |
| 25–49 | Medium | Yellow |
| 0–24 | Low | Green |
Scoring rules
| Rule ID | Condition | Points |
|---|---|---|
| R01 | Agent writes to external systems | +20 |
| R02 | Agent handles PII data | +15 |
| R03 | Agent makes external LLM API calls | +15 |
| R05 | No owner email assigned | +10 |
| R07 | Agent can execute code | +12 |
| R14 | Framework detection confidence ≥ 85% | −5 |