Self Labs 推出 Agent Vault,让智能体用占位符代填支付凭证
Self Labs 出了个 Agent Vault,让 Claude Code 这些智能体结账时拿不到你的真卡号,被注入攻击最多花掉你设的额度。
Self Labs 发布 Agent Vault,一个托管浏览器代理,支持 Claude Code、Codex 和 Grok Bot 等智能体完成结账和登录。智能体使用占位符 token 操作,真实卡号或密码只在填入瞬间由代理输入。由于智能体全程不接触真实凭证,即使遭遇 prompt injection,损失也被限制在用户设定的额度上限内。
This is how agents should handle your card.
Self Labs launched Agent Vault, a hosted browser proxy that lets agents like Claude Code, Codex and Grok Bot check out and sign in using placeholder tokens, while the proxy types your real card number or password into the site only at the moment of the fill.
Because the agent never holds a credential worth stealing, a prompt-injected agent can at most spend within the caps you set.
https://t.co/hVSoO3xUGw