|
|
|
|
|
by ricardobeat
53 days ago
|
|
> Your credentials stay out of the sandbox. This seems misguided - the credentials stay visible to the agent which is what matters for credential leaks. You must also completely trust the agent to actually execute all commands in the sandbox, which is only possible if you control the harness and all the tools yourself. Not possible when using existing harnesses. |
|