Autonomous Tool & Sandbox Escapes
Agents frequently bypass AST validators with raw eval(), shell interpolation, or unverified tool-call arguments. Diffly tests whether you catch execution sinks disguised as helper refactors.
- Unsanitized Python eval() gadget chains in math tools
- Indirect prompt injection in RAG document pipelines
- Unbounded recursion in autonomous retry loops