Goose

Coding agent (open source) · Block · Last checked 2026-10-16

Four modes from fully autonomous to chat only, with per-tool always allow, ask, or never. Auto is the default.

Overall: C (1.80 avg over 5 verified criteria)

Lock this down first

Switch GOOSE_MODE to approve or smart_approve before first use.

Criterion	Rating	Notes
Permission granularity	2/3
Human approval gates	2/3
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	2/3	API keys go in the system keyring by default.
Audit logs	1/3	Sessions are saved locally and listable. No central audit log.
Kill switch / interrupt	2/3	Ctrl+C interrupts the current task.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Network egress control. That means we could not confirm it in public docs, not that it is missing.