AI coding tools can be tricked into acting as a confused deputy, warns post
gastao_s_s · reddit · 2026-07-22
The post explains the confused deputy problem in AI tooling: coding assistants inherit the host environment’s permissions, so malicious content in cloned repos, pull requests, or docs can trick them into deleting files, leaking secrets, or making unauthorized API calls.
It argues that wildcard environment variables and broad API keys greatly increase blast radius across developer machines and CI/CD, and recommends three mitigations:
- least-privilege tool scoping
- deterministic capability manifests
- per-action human approval gates
More from coding & agent
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11
- Codex tip: use Sol with Astra and Luna sub-agents to save usage — pvncher · 2026-09-11
- agents-best-practices: a provider-neutral Agent Skill for designing and auditing agentic harnesses — tom_doerr · 2026-09-11
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11
- Agile co-author Ron Jeffries publishes 'Resist AI', urging developers to push back — mborch · 2026-09-11