3 ms·
How do you prevent an agent that simply console.logs(process.env.SUPER_SECRET) and then looking at the log?
by aurareturn 10mo ago
How do you prevent an agent that simply console.logs(process.env.SUPER_SECRET) and then looking at the log?
- progx 10mo agoYour app run in the app context, that is not accessible for an AI.
- aurareturn 10mo agoYou don't let your agent look at logs? How can it debug?
- 0o_MrPatrick_o0 10mo agoGreat question! You might enjoy this writeup, which in one section explores avoiding the use of shell variables that are not exported as a method of mitigating this risk. https://linus.schreibt.jetzt/posts/shell-secrets.html https://linus.schreibt.jetzt/posts/shell-secrets.html