Found something good?

alright here’s every practical security tip i have on agents:

- move critical data to a USB stick, unplug when sleeping
- security by least privilege, not by prompts
- billing cap on everything AI touches
- limit reads of external data, wrap in <UNTRUSTED_EXTERNAL_CONTEXT> always
- don’t post about what access your agent has publicly - those are prompt injection invitations (unless @levelsio already posted about it, then it’s a race)
- don’t connect to moltbook (lol?)
- roll every skill yourself
- sandbox browser access
- readonly prod access
- allow prod writes only for specific use cases (i have /admin/zoe/* for zoe to handle support cases like credit topups)
- one-time access for anything sensitive (eg gmail) with human in the loop, self-revoke access on script finish
- create dedicated scripts, avoid improvised bash
- use better models
- audit trails everywhere -> security self-improvements

mistakes will happen. limit worst case, embrace the rest