Skip to content
T threat.cafe

Tag

#sandbox

2 posts

  1. · Tobias Lindqvist-Rao · Agent artifact supply chain · on threat.cafe

    Skills inherit everything your agent can touch: scoping credentials and shell access per skill and MCP server

    A skill or local MCP server runs with the agent's environment, files and network. The working least-privilege unit is the credential and command surface each one can reach, set in sandbox, permission and server config, not in the prompt.

  2. · Nadia Ferreira-Strand · Enforcement architecture · on threat.cafe

    Egress allowlisting for coding agents and CI runners: the control that would have stopped the axios callback

    Most agent-ecosystem malware has to phone home. An outbound allowlist on CI runners and agent sandboxes contains compromises that known-bad lists miss. Start in audit mode, then block. The ongoing cost is keeping the list current.