We Built a Claude Agent That Doesn't Know Its Own API Keys

Posted by oelmgren on Tuesday March 24, 2026 @12:48PM
from the listenlabs.ai dept.

( 2 comments | 8 points | on HN )

Re:We Built a Claude Agent That Doesn't Know Its Own API Keys by fjuengermann on Tuesday March 24, 2026 @12:52PM (#47505646)

I wonder how many applications have exactly the vulnerability… But I’m sure Anthropic is going to deprecate the SDK in 2 months and change it.

[ Parent | on HN ]

Re:We Built a Claude Agent That Doesn't Know Its Own API Keys by oelmgren on Tuesday March 24, 2026 @12:59PM (#47505748)

Yeah, this is exactly what I was thinking.

Maybe they’ll add the ability to sandbox the env variables from the agent’s bash execution via the Agent SDK settings at some point.

[ Parent | on HN ]