Ask HN: How are you securing LLM code agents?

4 comments

• arty_prof 1 hour ago
  Best thing you can do is sandbox them, always check what they want to change with config file (package.json).

  Restrict any db operations, for example restrict to run migrations with prisma orm.

  Also restrict access to .env or your project configuration with credentials even for dev environment.
• wnsdy95 3 hours ago
  What do you mean by securing? Does this mean strictly control AI Agent to behave safely? Or make your data not to get exposed by chatting or so?
• maxbeech 14 minutes ago
  [dead]
• qasim157 1 hour ago
  [dead]