Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/microsoft/bcquality/agent-permissions-intersect-with-assignergit clone --depth 1 https://github.com/microsoft/BCQualityWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/microsoft/bcquality/agent-permissions-intersect-with-assigner)<a href="https://agentmods.dev/agents/microsoft/bcquality/agent-permissions-intersect-with-assigner"><img src="https://agentmods.dev/badge/agents/microsoft/bcquality/agent-permissions-intersect-with-assigner.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00302 |
| Opus 5 | $0.00000 | $0.00151 |
| Sonnet 5 | $0.00000 | $0.00060 |
| Haiku 4.5 | $0.00000 | $0.00030 |
Grade A, and why
agent-permissions-intersect-with-assigner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Agent permissions intersect the assigner's; agents cannot configure users
Description
An agent is a user, but it cannot configure users or other agents, and it cannot open sensitive pages such as user cards or permission-set assignment. Effective rights are the intersection of the assigning user's permissions and the agent's permission sets. Granting the agent a wide set does not bypass the assigner's limits, and a wide assigner still cannot give the agent user-admin powers the platform forbids.
Best Practice
Document that intersection. Give the agent only the table and page rights its tasks need. Do not add user-setup or permission-assignment pages to the agent profile or permission sets; those operations will fail by design.
See sample: agent-permissions-intersect-with-assigner.good.al.
Anti Pattern
Permission sets or profiles that include User card, Permission Set Assignment, or agent-admin pages, or comments that the agent runs as SUPER regardless of who assigned it. Detection signal: default access controls or profile including user-administration objects.
See sample: agent-permissions-intersect-with-assigner.bad.al.
See also
get-default-access-controls-least-privilege.md covers the permission sets assigned when an agent instance is created.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 31 lines · 0 tokens per session scan A 8cf541f95206
agent-permissions-intersect-with-assigner is an agent published in the GitHub repository microsoft/BCQuality (204 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 302 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
Documentation Update Agent
Specialized agent for creating, updating, and maintaining Wassette project documentation using mdBook.
settings-master-not-derived
Configuration files like claude-settings.json exist in two places.
curb
Enumerates the Tenable Hexa AI MCP tool surface, classifies each tool's privilege tier, and emits the minimum tool set, Tenable role, and MCP client config a described workflow needs.
clipboard-api-security-manager
Clipboard access and data security specialist.
deno-security-sandbox-expert
Deno permissions and security model implementation specialist.
Demonstrate
Agent for demonstrating VS Code features.