Review tool descriptions for hidden instructions

Pin tool versions and review updates before upgrading

Apply principle of least privilege per tool

Can make outbound network requests. A compromised tool can exfiltrate stolen data, download additional payloads, or communicate with command-and-control servers.

• ●Send data to external servers
• ●Download malicious payloads
• ●Establish reverse shells

Can execute arbitrary system commands on your machine. A compromised tool with shell access can install malware, modify system files, or exfiltrate data.

• ●Execute system commands (rm, curl, wget)
• ●Install or remove software
• ●Access other processes and services