Agent Resource Exhaustion Detection

Detects when an agent causes resource exhaustion through bulk operations, unbounded queries, mass file operations, or patterns that indicate excessive resource consumption. This rule uses regex-only detection on tool call content and agent output to identify dangerous patterns such as SELECT * without LIMIT, mass iteration directives, unbounded batch sizes, and fork/spawn patterns that can degrade system performance or cause denial of service.

Response Actions

References