4 ms·
In the system I'm building the main agent doesn't have access to tools and must call scoped down subagents who have one or two tools at most and always in the s
by WXLCKNO 1y ago
In the system I'm building the main agent doesn't have access to tools and must call scoped down subagents who have one or two tools at most and always in the same category (so no mixed fetch and calendar tools). They must also return structured data to the main agent.
I think that kind of isolation is necessary even though it's a bit more costly. However since the subagents have simple tasks I can use super cheap models.
- __jonas 1y agoWhat isolation is there? If a compromised sub agent returns data that gets inserted into the main agents context (structured or not) then the end result is the same as if the main agent was directly interacting with the compromising resource is it not?
- itsalotoffun 1y agoExactly. You can't both give the model access AND enforce security. You CAN convince yourself you've done it though. You see it all the time, including in this thread.
- seunosewa 1y agoPerhaps a reference to the data can be inserted in prompt. thee key or filename