News for hackers. Stuff that matters.

A comment on Ask HN: Do you trust AI agents with API keys / private keys?. Parent comment

Re:Ask HN: Do you trust AI agents with API keys / private keys? by devendra116 on Tuesday April 14, 2026 @09:53AM (#47765688)
if a agent has the keys in the same process, it can easily extract them
[ Parent | on HN ]
Re:Ask HN: Do you trust AI agents with API keys / private keys? by theozero on Wednesday April 15, 2026 @11:56PM (#47788481)
Totally - the only completely safe way is to inject keys in a proxy and keep them out of the process. But getting them totally out of plaintext is a great first step, both to keep it from AI and malicious scripts that are looking for keys.
[ Parent | on HN ]