I don’t think people realize that if they use a coding harness with some inference provider, they’ve effectively given that inference provider shell access to that machine.
Insane untapped (for now) attack vector.
Insane untapped (for now) attack vector.