Continue

Coding agent (IDE) · Continue · 2/7 verified · Last checked 2026-10-16

Per-tool policies: ask first, automatic, or excluded. Ask first is the default. Headless CLI runs drop ask tools entirely.

Overall: Unverified (2/7 controls verified; a grade needs at least 3)

Lock this down first

Leave write and terminal tools on Ask First, and exclude what you never use.

Scorecard

Criterion	Rating	Notes
Permission granularity	2/3	Per-tool policy: Ask First, Automatic or Excluded.
Human approval gates	2/3	Ask First is the default; headless CLI runs drop ask tools.
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	Unverified	Not confirmed in the docs we checked.
Audit logs	Unverified	Not confirmed in the docs we checked.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Secrets handling, Audit logs, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources

Vendor? Request a correction. We review corrections within 7 days.