Agent Baseline 发布软件工厂安全参考架构首版草案

AI 导读

Agent Baseline 发布软件工厂安全参考架构首版草案，针对编码智能体接入 MCP 等上下文工具时面临的数据外泄、提示词注入和凭证劫持等风险给出正式规范。该草案源于业界关于如何平衡开发者工具开放与安全防护的讨论，被视为面向构建者的重要起点。

正文

a couple months back i was on a pod with @vtahowe and @ianlivingstone chatting w/ a Billions-of-market-cap CISO about how to balance giving developers tools to make coding agents useful (think, mcps to all kinds of useful context link ticketing, email, slack etc) while avoiding data exfiltration, prompt injection, credential hijacks, etc. There was some hand-wavy "mcp gateway" talk but really cool to see this important question materialized into a formal spec for builders.

There's a lot more to build here, but this is a great start

来源：Dex Horthy · x.com