Roo Code

Coding agent (IDE) · Roo Code · 3/7 verified · Last checked 2026-10-16

Auto-approve with allowed and denied command prefixes. A public issue reported a denied-command bypass, so stay on the latest version.

Overall: C (1.67 avg, 3/7 controls verified)

Lock this down first

Keep allowedCommands narrow and update before trusting the deny list.

Scorecard

Criterion	Rating	Notes
Permission granularity	2/3	Longest-prefix matching on allowed and denied commands.
Human approval gates	2/3	Auto-approve runs only commands matching allowed prefixes.
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	1/3	.rooignore blocks tool access to ignored files. No secret store.
Audit logs	Unverified	Not confirmed in the docs we checked.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Audit logs, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources

Vendor? Request a correction. We review corrections within 7 days.