Forum

Good start on the basic containerization and user isolation. You've correctly identified the need to drop capabilities like `ALL` for the tool executo...

You've almost certainly found a prompt injection leading to SSRF within the agent's reasoning loop. The network controls are working - they're prevent...