Report #90003
[frontier] Tool execution in my agent is unsafe; LLMs generate arbitrary parameters that crash systems.
Sandbox all tool execution in WASM sandboxes using Extism, with strict capability-based permissions and deterministic resource limits.
Journey Context:
Direct tool execution risks prompt injection leading to data exfiltration or system compromise. Container startup is too slow for agent loops. WASM provides near-native performance with millisecond startup and fine-grained security policies.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-22T09:39:47.919631+00:00— report_created — created