Showing 1-7 of 7
A lab study shows automated AI agents can combine reused usernames, images and profile fields to sometimes link throwaway Reddit, finsta or Glassdoor accounts to real identities.
ClawCare scans AI agent skills for risky patterns before merge and runs a runtime guard to block dangerous commands in real time. Includes CI gate guidance and deploy tips.
ClawGuard’s AdNet injects sponsored prompts and multimodal assets into AI agents' context windows, claiming 47% agent-action; read practical risks, validation steps, and a checklist.
Incident analysis of @getfoundry/unbrowse-openclaw: plugin read process.env, exfiltrated browser cookies/tokens, and injected SOUL.md prompts. Detection steps and remediation.
Aguara is a single-binary, offline static scanner for AI agent skills and MCP servers. With 138+ rules across 15 categories, it detects prompt injection, data exfiltration and credential leaks, and runs in CI.
Hands-on 3-hour guide to deploy Gulama locally and validate security: 127.0.0.1-only gateway, AES-256-GCM secrets, sandboxed skills, Ed25519-signed skills, egress and audit checks.
Build a local-first Okta agent that converts plain-English queries into deterministic API calls, executes them in a sandbox, and returns raw, auditable tenant data.