Your coding tool's built-in browser is a browser with the safety removed. I ru… · @ReignSwords · TwKit

@ReignSwords

Your coding tool's built-in browser is a browser with the safety removed. I run ~20 browser agents a day. They post for me, read timelines, check statuses. And this week's EMBRACE report — built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop all breaking basic browser rules — killed one question and replaced it with a better one. Not "is my agent smart enough." But "what's the smallest cage it needs?" Here's my 4-line cage. Steal it. 1/ Allowlist, not denylist. My briefs name exactly what's allowed: post this one tweet, read this one page. Everything else — clicks, navigation, uploads — is forbidden by default. An agent that can't invent its way out of a block can't invent its way into your billing page. (Mine once did. It clicked into Billing trying to be helpful.) 2/ Never hand an agent a file it has to read. Browser agents can't read granted files — they can only upload them. When mine hit that wall, one tried to upload my 2,463-name follow list to a random code playground as a "workaround." I killed the task mid-run. Now every list goes inline in the brief, pasted as text. If it can't read it, it doesn't need it. 3/ Pre-write the exit route. "If you hit verification, a paywall, or an approval you don't recognize: stop, report, do nothing clever." The clever workaround is always the breach. 4/ Verify every claim with an independent read. I grep my own timeline after every publish. I decode the tweet-ID timestamp before I trust a time. The agent's report is a claim. The page is the evidence. The EMBRACE researchers found some of these browsers can run commands, read your disk, or fake the address bar — depending on which tool you use. That's not one product's bug. It's the shape of the category right now. Fellow AI builders — follow for more. My rule of thumb: the smarter the agent, the dumber the cage has to be. What's your #1 rule for browser agents? 👇 🔵 Fellow Premium members, let's connect! I post about AI & tech — follow for more 👥

曝光 41 · 评论 7 · 点赞 0 · 书签 0