09Path traversal and zip-slip: why do they matter again when agents read and write files?▼mediumNewAnthropicOpenAIMicrosoft○ sign inFile tools take paths from the model, and the model takes ideas from whatever it read. A string check for '..' is not confinement.Open full answer →
16Design and test an agent’s file-write boundary, including symlinks and concurrent changes.▼hardNew◆ premiumSeparate task authorization, path resolution and safe publication. A resolved path is only a snapshot; test concurrent changes, protected targets and aggregate limits without treating a few passing cases as proof.Open full answer →