On: Google Antigravity exfiltrates data via indirect prompt injection attack

[simonw]

The easiest way to do that today is to use one of the cloud-based asynchronous coding agent tools - like https://claude.ai/code or https://chatgpt.com/codex or https://jules.google/

They run the agent in a VM somewhere on their own infrastructure. Any leaks are limited to the code and credentials that you deliberately make available to those tools.

[keepamovin → simonw]

Yes, this is a good idea. My only beef with that is I would love if their base images would run on macOS runners, and Windows runners, too. Just like GH Actions workflows. Then I wouldn't need to go agentic locally.