ScopeMap: planning least-privilege permissions for AI agents

说明与用途

ScopeMap 是一个教育演示工具，帮助确定 AI 代理完成任务所需的最小权限，并导出 JSON 计划。

问题

Determining the minimal set of permissions an AI agent needs to perform a task while avoiding unnecessary or dangerous capabilities.

结果

ScopeMap successfully identifies over‑privileged capabilities, recommends a minimal set, and exports a structured plan, as verified by nine passing tests and a production build.

工作流

• Select a synthetic workflow (document summary, support response, or CSV analysis).
• Choose capabilities from seven options (scoped file reading, broad file access, file writing, sending email, external network access, shell execution, persistent memory).
• ScopeMap analyzes the selection against the workflow’s requirements.
• It highlights missing requirements, unnecessary permissions, and provides reasons for each recommendation.
• Apply the recommended set or edit the human‑review checklist.
• Export or download the plan as JSON.

证据

I built ScopeMap, an educational permission‑planning demo, with AI assistance in Lovable. It compares a requested capability set with a small, explicit set of requirements for a fictional workflow.

来源

The analysis shows missing requirements, unnecessary permissions, and the fixed reason behind each recommendation.

来源

The Lovable build reported nine passing tests and a successful production build.

来源