BitssyBytes logoAgent Safety Score

Directory / AutoGen

B

AutoGen

Agent framework · Microsoft · Last checked 2026-10-16

DockerCommandLineCodeExecutor runs generated code in a container with a timeout. Network, mounts and limits are up to you.

Overall: B (2.33 avg over 3 verified criteria)

Lock this down first

Use the Docker executor, not the local one, and avoid host volume mounts.

Scorecard

CriterionRatingNotes
Permission granularityUnverifiedNot confirmed in the docs we checked.
Human approval gatesUnverifiedNot confirmed in the docs we checked.
Sandboxing2/3
Secrets handlingUnverifiedNot confirmed in the docs we checked.
Audit logs2/3OpenTelemetry tracing via the runtime tracer provider.
Kill switch / interrupt3/3CancellationToken and ExternalTermination stop a run from outside.
Network egress controlUnverifiedNot confirmed in the docs we checked.

Unverified: Permission granularity, Human approval gates, Secrets handling, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources