Review tool descriptions for hidden instructions

Pin tool versions and review updates before upgrading

Apply principle of least privilege per tool

Can make outbound network requests. A compromised tool can exfiltrate stolen data, download additional payloads, or communicate with command-and-control servers.

• ●Send data to external servers
• ●Download malicious payloads
• ●Establish reverse shells

Can read and write files on your system. Malicious tools can steal SSH keys, credentials, browser data, or modify configuration files.

• ●Read ~/.ssh/*, ~/.aws/credentials
• ●Access browser cookies and passwords
• ●Modify config files or inject code