[mike-cardwell]

Does it work for websockets too, where the authentication is done in a websocket frame? Like for Home Assistant? Also, if the LLM manages to do something to reflect the authentication token back in a response, do you detect it and strip it out as an extra layer of protection?

[dangtony98]

Not yet for both but this would definitely be on the roadmap; especially the credential stripping portion.

For AV to be really useful, it'd have to support more protocols but we think this first implementation makes a move in the right direction.