📦 deps(thirdparty): update snapshots
This commit is contained in:
@@ -321,7 +321,7 @@ async def reflection_node(state: AgentState) -> AgentState:
|
||||
- Never expose API keys in generated code. All secrets must use environment variables:
|
||||
```python
|
||||
OPENAI_API_KEY = os.getenv("OPENAI_API_KEY") # ✅ correct
|
||||
OPENAI_API_KEY = "sk-..." # ❌ never do this
|
||||
leaked_openai_token = "[redacted API key]" # ❌ never do this
|
||||
```
|
||||
- Always validate and sanitize user inputs before injecting them into agent prompts — treat all user input as untrusted.
|
||||
- Add a permission layer before allowing agents to execute shell commands or write to filesystems.
|
||||
|
||||
Reference in New Issue
Block a user