Agent-security
6 posts tagged with “Agent-security”
Claude Code ran terraform destroy on the live stack
Claude Code ran terraform destroy with no saved plan. HOL Guard paused it: Allow just this once or Keep blocked.
Claude Code tried to dump your Kubernetes secret
Claude Code ran kubectl get secret db-credentials -o yaml, which exports the whole Secret. HOL Guard paused it: Allow just this once or Keep blocked.
Claude Code approved itself: Guard paused the self-click
Claude Code hit a warning, then ran hol-guard approvals approve on itself. HOL Guard froze it. Inbox: Allow just this once or Keep blocked.
Hidden command in Claude Code: base64 piped to sh
Chat looked short. Claude Code packed a hidden command in base64 and piped decode to sh. HOL Guard froze it. Inbox: Allow just this once or Keep blocked.
Your agent tried to ship your AWS keys
You left Claude Code running. It tried to send your AWS keys to a website you never opened. Guard froze it: Allow just this once, or Keep blocked.
HOL Guard 3.0: Rust authority, extension-first controls, honest harness contracts
HOL Guard 3.0 puts PreToolUse on a version-matched Rust path with no Python semantic fallback, makes Local Extensions the capability vocabulary for managed-restrictive Control Sets, and keeps sync paused from meaning unprotected. Pin tip 3.0.113; do not pin yanked 3.0.0.