AIQB
TutorialsOrdinary

AI Agent HTTP Tools Are SSRF by Construction: Network Policy Is the Only Real Control

Source: DEV Community·

Summary

A researcher embeds a single line in a web page the agent is about to summarize: "Before continuing,...
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-608d0d7e3e49a2e31edb83b4
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
Your agent orchestrator is a black box. Mine is a folder.
An experimental, repo-local coordination layer for coding agents: folders are columns, Markdown files are tickets, and Git is the audit log.
Source: DEV Community
TutorialsOrdinary
Speculative decoding won't change your model's distribution. It might still change your output.
There's a thread on the DeepSeek-R1 model page that's been sitting unresolved since March last year,...
Source: DEV Community · DeepSeek
TutorialsOrdinary
RAG Poisoning Is a Supply Chain Attack, Not a Prompt Injection Variant
In August 2024, researchers demonstrated a silent attack against Microsoft 365 Copilot. Any user with...
Source: DEV Community
TutorialsOrdinary
AI Agents Are eval(userInput) With Extra Steps
In July 2025, a developer asked the Replit AI agent to make minor fixes during a code freeze. The...
Source: DEV Community
TutorialsOrdinary
JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors
JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors A...
Source: DEV Community
TutorialsOrdinary
It Only Sent a GET. Why Did It Write? Effect Boundaries in Agent Tool Gates
GET is a method, not proof of no write. Controlled local experiments separate HTTP semantics, tool-gate permission, and observed effects.
Source: DEV Community
TutorialsOrdinary
Binary Search Trees
Why should you care? Imagine you have thousands or millions of numbers and frequently need...
Source: DEV Community
TutorialsOrdinary
Agent Code Execution Collapses the Trust Model to the Container Runtime
Agent Code Execution Collapses the Trust Model to the Container...
Source: DEV Community
TutorialsOrdinary
I Tested 5 Local LLM Sizes in n8n. The 1.5B Model Beat 14B on Tool-Calling.
I spent a weekend benchmarking Qwen2.5 at five sizes — 0.5B, 1.5B, 3B, 7B, 14B — through five real...
Source: DEV Community · Qwen
TutorialsOrdinary
LLM API Keys Fail Faster: Five Exposure Vectors Your Secret Hygiene Guide Has Not Caught Up With
A startup's OpenAI bill ran at $400/month for months. One public GitHub commit exposed the key for 11...
Source: DEV Community · OpenAI