{"id":"ia.auto-submit-risk","name":"Auto-submit risk","verify":{"command":null,"rescan":"isagentready results {domain} --checkpoint ia.auto-submit-risk","expect":null},"fix":{"steps":[{"action":"Find forms with toolautosubmit and a password, payment or delete action.","order":1,"language":null,"code_example":null},{"action":"Remove toolautosubmit from these forms so that the user confirms each submit.","order":2,"language":null,"code_example":null}],"summary":"Remove toolautosubmit from forms with sensitive data.","skill":{"name":"security-trust","anchor":"ia.auto-submit-risk"}},"category":"security","aggregate":null,"references":[{"title":"WebMCP W3C Proposal","kind":"guide","url":"https://webmachinelearning.github.io/webmcp/"}],"stage":"act","lifecycle":{"introduced":"2026-08-24","revised":[],"retired":null,"replaced_by":null},"methodology_version":"2026-10-22","evidence_tier":"experimental","evidence_source":{"title":"WebMCP W3C Proposal","url":"https://webmachinelearning.github.io/webmcp/"},"why":"The toolautosubmit attribute allows AI agents to submit forms without user confirmation. This is safe for search/filter forms but risky for payment, account deletion, or password forms.","profiles":["browser_agent_usability","agentic_commerce"],"score_role":"informational","legacy_id":"5.11","i18n":{"nl":{"name":"Risico van automatisch verzenden","steps":["Zoek formulieren met toolautosubmit en een wachtwoord-, betaal- of verwijderactie.","Verwijder toolautosubmit van deze formulieren, zodat de gebruiker elke verzending bevestigt."],"why":"Het toolautosubmit-attribuut laat AI-agents formulieren verzenden zonder bevestiging. Dat is veilig voor zoek- en filterformulieren, maar riskant voor betalingen, accountverwijdering of wachtwoorden.","fix_summary":"Verwijder toolautosubmit van formulieren met gevoelige data.","verify_expect":null}},"ar_practice_ids":[],"strength":"MAY","ar_mapping":"none","evidence_type":"recommendation","detail_url":"https://isagentready.com/en/methodology/checkpoints/ia.auto-submit-risk","maturity":"emerging","applicability":{"mode":"detected_surface","condition":null,"surfaces":["auth"]}}