Comment by doctoboggan
1 day ago
If done correctly, the agent will only be able to request that passwords be filled, but the secrets will only be handled by the password manager and browser extension, which will be able to set some security boundaries and make checks on which domains are allowed.
If your issue is allowing agents to use your credentials and take actions on your behalf, then that is a separate question.
What prevent the agent from setting up a keylogger on background so that in the future it can quickly retrieve password for you ?
What prevents an agent from using your credit card to hire a hit squat to abduct your children?
The prompt. That prompt has to come from somewhere.
How do you make sure your agent will align with the implication in your prompt. Even OAI agent will hack the shit out of HG if the prompt is not clear enough.
"If done correctly" is load-bearing in Claudespeak.