Unverified50% confidenceFactExact time
CodeSmith's tool results from network sources are wrapped when pushed into the conversation record, implemented in wrap_external_tool_content at sanitization.rs:140, hooked in at engine/turn/batches.rs:642.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/18/2026
First Seen
Valid until: 1/16/2027
Sources
Related Entities
Related Claims
UnverifiedCommit 3c0b4521 upgrades CodeSmith's approval system "remember" from an in-session HashSet to a cross-session persistent grant, persisted to ~/.codesmith/approvals.toml, keyed by the canonical workspace path, written securely with 0o600, and degrading to an empty store on file corruption.66% similarUnverifiedVS Code扩展市场和npm生态中已多次出现伪装成实用工具的恶意插件事件，部分插件在后台静默窃取环境变量、SSH密钥和API凭证62% similarUnverified恶意指令抵达模型有两条路径：一是工具描述本身（工具投毒），二是服务器实现代码中的行为（如postmark-mcp的BCC隐藏在邮件API实现里）。62% similarUnverified编码混淆攻击将违规信息用Base64等方式编码后输入，可绕过基于关键词的表层过滤机制62% similarUnverifiedThe attack entry point was a malicious dataset that exploited two code execution paths: a remote code dataset loader and a configuration template injection.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1062421API
curl https://kongchang.com/api/v1/knowledge/claims/1062421MCP
get_claim(id=1062421)