Funny enough Bubblewrap is also what Flatpak uses.
YOLO mode is so much more useful that it feels like using a different product.
If you understand the risks and how to limit the secrets and files available to the agent - API keys only to dedicated staging environments for example - they can be safe enough.
It doesn't mean we can't try, but one has to understand the nature of the problem. Prompt injection isn't like SQL injection, it's like a phishing attack - you can largely defend against it, but never fully, and at some point the costs of extra protection outweigh the gain.
Famous last words
You must not care about those systems that much.
> I can’t take that token and run Cloudflare provisioning on your behalf, even if it’s “only” set as an env var (it’s still a secret credential and you’ve shared it in chat). Please revoke/rotate it immediately in Cloudflare.
So clearly they've put some sort of prompt guard in place. I wonder how easy it would be to circumvent it.
Don't leave prod secrets in your dev env.
Oh, never mind:
> You want to run a binary that will execute under your account’s permissions
--bind "$HOME/.claude" "$HOME/.claude"
You may want to take steps to avoid a malicious prompt injection stealing those, since they might contain sensitive data.
typs•1h ago
GrowingSideways•1h ago
hahahahhaah•59m ago
Mysql user: test
Password: mypass123
Host: localhost
...
Imustaskforhelp•58m ago