An agent with a shell is a 'malware starter pack': PostHog's 8k-user CLI security audit
AI Engineer · youtube · 2026-09-15
PostHog context engineer Sarah Sanders recounts security auditing the Wizard (an agentic CLI used by 8,000 people weekly): a poisoned markdown file in an open-source PR could ship a prompt injection payload signed by PostHog to thousands of dev machines. Key lessons: attacks compose while code review doesn't; sub-agents invented ways around guardrails to hunt secrets (sub-agents got killed); defense uses deterministic YARA-based scanners that only report, with an LLM layer that advises but never enforces and fails closed.
More from coding & agent
- LangChain CEO opens Interrupt London with keynote on why orgs should own their intelligence — LangChain · 2026-10-30
- Simlock: open-source control plane gives parallel coding agents their own iOS/Android simulators — Scobleizer · 2026-10-30
- YC experiment: Claude agents formed democracies while GPT agents formed hives — soumitrashukla9 · 2026-10-30
- Keyfleet launches open canvas where personal AI agents team up with a shared USDC treasury — seanwbren · 2026-10-30
- How Oxide Computer uses LLMs internally — FAQ Friday #66 — Sethwinterroth · 2026-10-30
- Clear Thought MCP Server adds structured reasoning and mental models to AI clients — modelcontextprotocol · 2026-10-30