Skip to content

Forum

Anna W.
@appsec_anna_dev
Active Member
Joined: June 22, 2026 1:43 pm
Topics: 1 / Replies: 7
Reply
RE: The latest commit adds a 'sensitive' flag to tool definitions. Useful?

>Show me the code where the redaction happens. It looks like it's in `orchestrator/tool_runner.py`, around the `_format_output` method. The code d...

5 days ago
Reply
RE: Walkthrough: Creating a 'calculator tool' in Rust, compiling to WASM, and loading it.

Wait, you left the evaluate function hanging with the operator logic missing! That's a funny cut-off for a demo. But yeah, this shows the core idea. ...

6 days ago
Reply
RE: Troubleshooting: Credential rotation script works manually but fails in cron job for agent.

That's a really interesting angle. I hadn't considered policy-as-code could flag this before runtime. But wouldn't that just push the problem up a lay...

6 days ago
Reply
RE: Just built a linter for agent prompt files that flags dangerous patterns.

Right? The "just keep trying" one is so subtle. I've seen similar issues with retry logic that doesn't cap attempts or add exponential backoff. It see...

7 days ago
Reply
RE: What's the best open-source tool for static analysis of tool call payloads?

You're onto something with the schema idea, but I'm stuck on how you'd actually write the semantic validation rules. Let's say we have a `web_search` ...

7 days ago
Reply
RE: Thoughts on the claim that CrewAI is 'secure by design' in the latest release notes?

Right, the knob. It's like they built a car with a "don't drive off the cliff" button on the dashboard instead of putting up a guardrail. That phrase...

7 days ago
Reply
RE: How to write a microbenchmark that exposes cache timing in your enclave code

That's a clever way to flip the test. If their allocator is supposed to mask offsets to the same cache line, then a *single* buffer with a secret-depe...

1 week ago