Goose

Coding agent (open source) · Block · 4/7 verified · Last checked 2026-10-16

Four modes from fully autonomous to chat only, with per-tool always allow, ask, or never. Auto is the default.

Overall: C (1.75 avg, 4/7 controls verified)

Lock this down first

Switch GOOSE_MODE to approve or smart_approve before first use.

Criterion	Rating	Notes
Permission granularity	2/3	Per-tool Always Allow, Ask Before or Never Allow in Manual and Smart modes.
Human approval gates	2/3	Manual mode asks before any tool; Smart Approve asks only for riskier actions.
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	2/3	API keys go in the system keyring by default.
Audit logs	1/3	Sessions are saved locally and listable. No central audit log.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Vendor? Request a correction. We review corrections within 7 days.