From @vercel.com: An agent performing support duties for a specific customer should receive a tool scoped to that customer's data, not a tool that accepts a customer ID parameter, since that parameter is subject to prompt injection. vercel.com/blog/securit...
vercel.comSecurity boundaries in agentic architectures - VercelA framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret i...
0 reposts0 likes