Find Spring AI tool resolution fallback (OWASP LLM06)

Proprietary

Find explicitly enabled Spring AI tool resolution fallback in DefaultToolCallingManager builders and Spring configuration, including placeholders with a true default. Fallback allows executing tools absent from the request callbacks if the resolver knows their names. Review the resolver and request-specific permissions; enabling fallback is not by itself proof of unauthorized execution.

org.openrewrite.ai.security.FindSpringAiToolResolutionFallback

mod run . --recipe=org.openrewrite.ai.security.FindSpringAiToolResolutionFallback

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.