3 ms·
Different layers, different risks. You do not expect an agent-level app to run untrusted binaries. You expect prompt injection, etc. And I don't at all agree
by brookst 3mo ago
Different layers, different risks.
You do not expect an agent-level app to run untrusted binaries. You expect prompt injection, etc.
And I don't at all agree that a malicious executable landing in some directory is already game over. Plenty of zip files have malicious executables, it doesn't mean you say "oh, my zip extractor should just run every executable because if one's bad I'm already toast".
- xeyownt 3mo agoOk, so you download the repo, launch Cursor, it compiles code and run it (if not, why do you even use Cursor at the first place?). Same effect.