Directory / Roo Code
Roo Code
Auto-approve with allowed and denied command prefixes. A public issue reported a denied-command bypass that was later fixed, so stay on the latest version.
Lock this down first
Keep allowedCommands narrow and update before trusting the deny list.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | 2/3 | Longest-prefix matching on allowed and denied commands. |
| Human approval gates | 2/3 | |
| Sandboxing | Unverified | Not confirmed in the docs we checked. |
| Secrets handling | 1/3 | .rooignore blocks tool access to ignored files. No secret store. |
| Audit logs | Unverified | Not confirmed in the docs we checked. |
| Kill switch / interrupt | Unverified | Not confirmed in the docs we checked. |
| Network egress control | Unverified | Not confirmed in the docs we checked. |