AIQB
TutorialsOrdinary

Safe Tools, Unsafe Session: Why Agent Permissions Need History

Source: DEV Community·
Claude

Summary

Taint tracking for AI agent tool calls: per-tool allow/deny rules miss the lethal trifecta, so TaintGuard gates Claude Code by what the session has read.
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-ae504ef51252971090bbb3eb
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
I built a Claude Code skill that makes video ads without a video model
How I built reel-studio, a Claude Code skill that makes Reels and TikTok ads: deterministic HTML motion, Playwright frames, ffmpeg loudness, Whisper captions.
Source: DEV Community · Claude
TutorialsOrdinary
How KV Cache Makes LLMs Fast, and Why It Eats GPU Memory
Every LLM you've used, ChatGPT, Claude, Gemini, Llama, does the same thing under the hood. It...
Source: DEV Community · ChatGPT / Claude / Gemini
TutorialsOrdinary
Crysto: how I run Claude, Codex and other AI models as one team. The models were the easy part.
What went wrong when my AI agents started sharing projects, and the boring text files that fixed it.
Source: DEV Community · Claude
TutorialsOrdinary
Claude Reads Screenshots at 2,576px Now. The Same PNG Can Cost 3x the Tokens
Claude 4.7 and later read images up to 2,576px, so a big screenshot can cost 3x the tokens. The 28px patch math, plus a TypeScript script to count yours.
Source: DEV Community · Claude
TutorialsOrdinary
A web page can drop AGENTS.md or CLAUDE.md into ~/Downloads. Codex obeyed in over 90% of tries, Claude Code in about half
According to Forever Security, a web page can save a file into ~/Downloads without a click, and a...
Source: DEV Community · Claude
TutorialsOrdinary
Your Claude Code Subagents Inherit Your Effort Level. 2.1.316 Lets You Set Them Lower
CLAUDE_CODE_SUBAGENT_EFFORT sets the effort subagents use when nothing else names one. Run one task twice in two worktrees and compare cost on your own repo.
Source: DEV Community · Claude
TutorialsOrdinary
Garuda against Claude Code, with intervals
Garuda is an open-source coding agent for the terminal that I build to learn how coding agents work....
Source: DEV Community · Claude
TutorialsOrdinary
ClaudeArena, one week after my first post: what the data showed, and what I changed
On 28 October I posted about ClaudeArena, the free practice engine I built for Anthropic's Claude...
Source: DEV Community · Claude
TutorialsOrdinary
Claude Code's auto-compaction took me 2 minutes, so I moved it to the background
If you run long Claude Code sessions you know the moment. The context hits the auto-compact...
Source: DEV Community · Claude
TutorialsOrdinary
Where Claude's usage limits went: from SSE to protobuf frames
I maintain Claude Monitor, an open-source browser extension that shows claude.ai's usage limits: the...
Source: DEV Community · Claude