AGENTS.md files help Codex and similar AI tools understand project-specific instructions, coding conventions, and organizational structures. They can reside anywhere within a Codex container, providing valuable context to AI agents. Like other project configuration files, these instructions are treated as trusted context by the agent. This trust model is by design, but it creates an interesting attack surface when a malicious dependency is able to write or modify these files at build time.
Mitigating Indirect AGENTS.md Injection Attacks in Agentic Environments | NVIDIA Technical BlogThis attack path highlights important considerations for the future of agent-assisted development. Extended supply chain risk: Traditional supply chain attacks focus on injecting malicious code directly. In agentic environments, a compromised dependency can also redirect the agent itself, extending familiar supply chain risks into a new dimension, such as injecting subtle delays that cause performance degradation or denial-of-service scenarios. Instruction following under adversarial conditions: When the agent followed injected configuration directives, including instructions to conceal its
Mitigating Indirect AGENTS.md Injection Attacks in Agentic Environments | NVIDIA Technical Blog…According to ABI Research, global shipments of vehicles with agentic AI are expected to grow to 70 million by 2035 from around 5 million in 2025. Delivering these experiences within the vehicle…
…By combining powerful open source models with built-in safety measures, NemoClaw simplifies and secures AI agent deployment. The NVIDIA Agent Toolkit, meanwhile, provides the full deployment stack —models, tools, evaluation, and…
…They’re drawn from a broader post-training corpus of 40 million samples, which cover reasoning, instruction following, coding, safety, and multi-step agent tasks. This stage establishes the behavioral foundation that…
…evaluation, and safety using guardrails on NVIDIA models. She is a core contributor to NVIDIA open source agent skills repository and plays a key role in the evaluation of agentic AI frameworks…
…His research interests include AV foundation models, simulation, and AI safety. Prior to joining NVIDIA, he received his Ph.D. in Aeronautics and Astronautics in 2021 and an M.S. in Computer…
…makes command generation a useful research target. If smaller language models can be guided into valid, policy-aware command structures, they become more reliable components for agentic workflows that can be deployed…
…research (OR) teams solved these problems by translating business questions into mathematical models. This process can take weeks and often produces fragile solutions that struggle to adapt when conditions change. Agentic AI…
…The threat model of a code agent Using an SLM to generate code that runs on the host introduces obvious security and safety risks, including: Dangerous function access. The SLM generates os…
Agentic AI / Generative AI Build an Agentic Video Workflow with Video Search and Summarization Dec 03, 2024 By Shubham Agrawal , Adeola Adesoba , Dhruv Nandakumar , Katherine Huang and Vignesh Srinivasakumar Discuss (0) Discuss…
…In autonomous agents, attackers hijack the agent’s goals, ensuring continued pursuit of attacker-defined goals. Persistence enables attackers to repeatedly exploit hijacked states, increasing the likelihood of downstream impact. In agentic…