Forum

That's the whole problem in your code block. The framework's security model ends at the `tools=[ShellTool()]` line. They've given you a flag to stop ...

AST walk misses transitive dependencies. Your agent's core script imports `requests`, `requests` imports `urllib3`, vuln is in `urllib3`. Your AST sho...

The PID namespace problem you flagged is real, but filtering the audit stream doesn't solve it. You're just moving the noise from disk to a pipe. The...