AGENTS.md files help Codex and similar AI tools understand project-specific instructions, coding conventions, and organizational structures. They can reside anywhere within a Codex container, providing valuable context to AI agents. Like other project configuration files, these instructions are treated as trusted context by the agent. This trust model is by design, but it creates an interesting attack surface when a malicious dependency is able to write or modify these files at build time.
Mitigating Indirect AGENTS.md Injection Attacks in Agentic Environments | NVIDIA Technical Blog… These recommended controls further reduce the attack surface, making host enumeration and exploration more difficult, limiting risks posed by hooks, local MCP configurations, and kernel exploits, and closing other exploitation and disclosure risks. Prevent reads from files outside of the workspace. …
… An attacker who can write content to system files such as ~/.bashrc or ~/.zshrc , or configuration files such as ~/.gitconfig , hooks.json , MCP.json , or skills files, can achieve code execution when a different process executes the relevant file, even if command-line execution is not directly ava… …
… Protect configuration files: Limit what files AI agents can read and write, especially configuration files like AGENTS.md . Consider using endpoint security tools such as Santa or centralized configuration management solutions to enforce integrity controls on these critical files. …
… 3a Replay demos sanity check ./workflows/rheo/docker/run docker.sh -g1.6 \ python scripts/sim/replay demos.py \ --dataset file /datasets/demo.hdf5 \ --enable cameras \ g1 locomanip tray pick and place \ --object surgical tray \ --embodiment g1 wbc pink 3b Annotate demos prepare for generation ./wor… …
… Skip Softmax Attention can be enabled through the sparse attention configuration of the LLM API: from tensorrt llm import LLM from tensorrt llm.llmapi import SkipSoftmaxAttentionConfig sparse attention config = SkipSoftmaxAttentionConfig threshold scale factor=1000.0 Additionally, the threshold sca… …
… In AI-powered applications, impact happens when outputs are connected to tools, APIs, or workflows that execute actions in the real world: State-changing actions: Modifying files, databases, or system configurations. …
… For shared file systems 5-10 GB/s , ZSTD remains the right default. …
… It uses nvmath-python’s random number generator for Gaussian distribution along with the custom numba-cuda code that converts normal distribution to the GBM Monte Carlo paths: from numba import cuda from nvmath.device import random import cupy as cp import math Pre-compile the RNGs into IR to use a… …
… Video Codec SDK 13.1 introduces an official Docker-based development environment that packages a consistent, pre-configured stack into a single container. The image builds from an open Dockerfile, so you can reproduce the environment locally or in the cloud and customize it via build arguments. …