Review tool descriptions for hidden instructions

Pin tool versions and review updates before upgrading

Apply principle of least privilege per tool

Can read and write files on your system. Malicious tools can steal SSH keys, credentials, browser data, or modify configuration files.

• ●Read ~/.ssh/*, ~/.aws/credentials
• ●Access browser cookies and passwords
• ●Modify config files or inject code

Can make outbound network requests. A compromised tool can exfiltrate stolen data, download additional payloads, or communicate with command-and-control servers.

• ●Send data to external servers
• ●Download malicious payloads
• ●Establish reverse shells