top of page

B06

Action Bounding & Blast Radius

Agents do not execute self-generated or externally supplied code outside a sandbox.

WHAT IT ADDRESSES

Remote code execution via hidden instructions or generated code.

VERIFICATION METHOD

Sandbox escape test.

OWASP T&M

bottom of page