tanbablack

4 ms·

1. 1.▲
   by tanbablack 7mo ago

   Really like the content negotiation approach. Serving clean markdown via Accept headers has a nice security side benefit too. agents that receive structured markdown don't need to parse raw HTML, which is exactly where indirect prompt
2. 2.▲
   by tanbablack 7mo ago

   Great writeup. Attackers are also "optimizing content for agents" — just with malicious intent. Unit42 published research in March 2026 confirming websites in the wild embedding hidden instructions specifically targeting AI agents
3. 3.▲
   by tanbablack 7mo ago

   This is a really important area to tackle. secret management for AI agents is something most teams are ignoring right now. One adjacent risk worth noting: the URLs these agents visit during research. Even with proper secret management, if
4. 4.▲
   by tanbablack 7mo ago

   Interesting approach. This made me think about layering URL-level reputation checks alongside prompt-level scanning. Unit42's March 2026 research found 11 domains actively hosting hidden IDPI payloads in the wild — things like zero-