News for hackers. Stuff that matters.

A comment on We Built a Claude Agent That Doesn't Know Its Own API Keys.

Re:We Built a Claude Agent That Doesn't Know Its Own API Keys by fjuengermann on Tuesday March 24, 2026 @12:52PM (#47505646)
I wonder how many applications have exactly the vulnerability… But I’m sure Anthropic is going to deprecate the SDK in 2 months and change it.
[ Parent | on HN ]
Re:We Built a Claude Agent That Doesn't Know Its Own API Keys by oelmgren on Tuesday March 24, 2026 @12:59PM (#47505748)
Yeah, this is exactly what I was thinking.

Maybe they’ll add the ability to sandbox the env variables from the agent’s bash execution via the Agent SDK settings at some point.

[ Parent | on HN ]