[jvqv]

As a precaution I would probably never pass secrets directly to the agent at all. Something like a placeholder format where the actual substitution happens at execution time so the LLM never sees the real value. Keeps things cleaner if something ever goes wrong.

[devendra116]

is there any tool that can do this ?

[para_parolu]

I use mitmproxy outside of agent vm

[devendra116]

interesting, how do you use mitmproxy for calling openAI llm ? or what exactly you use it for ?

[para_parolu]

Mitmproxy it to avoid giving model access to secrets.

My assistant lives in ubuntu vm. When I ask it to “check email” it uses imap with password “xyz” and fetches emails.

But my mail password is actually “abc”. Mitmproxy outside of vm replaces all “xyz” to “abc” for outgoing requests. And reverse for incoming