Agent WranglersAI agents and models Required
Break the lethal trifecta
Never give one agent all three of private data, untrusted content and a way to send data out. Remove at least one.
How to do it
List each agent's data, inputs and outputs. If it reads private data and outside content, block links, images, email and web requests that leave your site. Or split the work into two agents, so the one that reads outside content never sees private data.
How to check
In staging, give the agent a page asking it to put a test record into a link to test.example.org. The test server receives no request.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/ai-agents-and-models/lethal-trifecta.