Review tool descriptions for hidden instructions

Pin tool versions and review updates before upgrading

Apply principle of least privilege per tool

Can make outbound network requests. A compromised tool can exfiltrate stolen data, download additional payloads, or communicate with command-and-control servers.

• ●Send data to external servers
• ●Download malicious payloads
• ●Establish reverse shells

Can execute arbitrary system commands on your machine. A compromised tool with shell access can install malware, modify system files, or exfiltrate data.

• ●Execute system commands (rm, curl, wget)
• ●Install or remove software
• ●Access other processes and services

Can read and write files on your system. Malicious tools can steal SSH keys, credentials, browser data, or modify configuration files.

• ●Read ~/.ssh/*, ~/.aws/credentials
• ●Access browser cookies and passwords
• ●Modify config files or inject code