Skip to content

Commit db1f2ed

Browse files
committed
Update risk levels and warnings in auto-approving actions documentation for clarity
1 parent 80d002c commit db1f2ed

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

docs/advanced-usage/auto-approving-actions.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -26,9 +26,9 @@ Click the toolbar to expand it and configure individual permissions:
2626

2727
| Permission | What it does | Risk level |
2828
|------------|--------------|------------|
29-
| **Read files and directories** | Lets Roo access files without asking | Low |
29+
| **Read files and directories** | Lets Roo access files without asking | Medium |
3030
| **Edit files** | Lets Roo modify files without asking | **High** |
31-
| **Execute approved commands** | Runs whitelisted terminal commands automatically | **Very High** |
31+
| **Execute approved commands** | Runs whitelisted terminal commands automatically | **High** |
3232
| **Use the browser** | Allows headless browser interaction | Medium |
3333
| **Use MCP servers** | Lets Roo use configured MCP services | Medium-High |
3434
| **Switch modes** | Changes between Roo modes automatically | Low |
@@ -65,16 +65,16 @@ To access these settings:
6565

6666
### Read Operations
6767

68-
:::info Read Operations
68+
:::caution Read Operations
6969
<img src="/img/auto-approving-actions/auto-approving-actions-6.png" alt="Read-only operations setting" width="550" />
7070

7171
**Setting:** "Always approve read-only operations"
7272

7373
**Description:** "When enabled, Roo will automatically view directory contents and read files without requiring you to click the Approve button."
7474

75-
**Risk level:** Low
75+
**Risk level:** Medium
7676

77-
This is the safest auto-approval setting as it only gives Roo the ability to read files, not modify them. Recommended as a starting point for most users, even in production environments.
77+
While this setting only allows reading files (not modifying them), it could potentially expose sensitive data. Still recommended as a starting point for most users, but be mindful of what files Roo can access.
7878
:::
7979

8080
### Write Operations
@@ -199,7 +199,7 @@ Enables Roo to create and complete subtasks automatically. This relates to workf
199199

200200
### Command Execution
201201

202-
:::danger Command Execution
202+
:::caution Command Execution
203203
<img src="/img/auto-approving-actions/auto-approving-actions-13.png" alt="Command execution setting with whitelist interface" width="550" />
204204

205205
**Setting:** "Always approve allowed execute operations"
@@ -208,9 +208,9 @@ Enables Roo to create and complete subtasks automatically. This relates to workf
208208

209209
**Command management:** "Command prefixes that can be auto-executed when 'Always approve execute operations' is enabled. Add * to allow all commands (use with caution)."
210210

211-
**Risk level:** Very High
211+
**Risk level:** High
212212

213-
This is the highest-risk setting as it allows terminal command execution. Critical security features:
213+
This setting allows terminal command execution with controls. While risky, the whitelist feature limits what commands can run. Important security features:
214214

215215
- Whitelist specific command prefixes (recommended)
216216
- Never use * wildcard in production or with sensitive data

0 commit comments

Comments
 (0)