Lucene search
+L

3 matches found

Kitploit
Kitploit
added 2026/09/19 9:17 p.m.20 views

clawk

给编码代理一个它自己的、一次性的 Linux 机器,而不是你的。 -lightgrey 安装 · 快速上手 · 为什么用虚拟机? · 工作原理 · 对比 · 常见问题 · 文档 编码代理只有在你真正让它 动手 做事时才有用:安装包、运行它写的代码、启动服务器、使用网络。在你自己机器上,这只会留下两个糟糕的选择。要么你批准每一条命令(然后每隔几秒就盯着一个提示符),要么你运行 --dangerously-skip-permissions,然后祈祷没有什么是离一个 rm -rf 或一个泄露的令牌那么近。 clawk 是第三个选择。cd 进一个仓库,输入 clawk,Claude Code(或...

6.1AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/08/31 1:05 p.m.11 views

clawk v0.4.0

Give a coding agent its own disposable Linux machine, not yours. -lightgrey Install · Quickstart · Why a VM? · How it works · Compared to · FAQ · Docs A coding agent is only useful when you let it actually do things: install packages, run the code it writes, start servers, use the network. On you...

6AI score
SaveExploits0References20
Github Security Blog
Github Security Blog
added 2023/05/31 11:39 p.m.34 views

Missing "--allow-net" permission check for built-in Node modules

Impact Outbound HTTP requests made using the built-in "node:http" or "node:https" modules are incorrectly not checked against the network permission allow list --allow-net. Dependencies relying on these built-in modules are subject to the vulnerability too. Users of Deno versions prior to 1.34.0...

9.8CVSS6.7AI score0.00625EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder