The Lethal Trifecta Is Already on Your Laptops — Michael Patterson, Coder

This talk introduces the 'lethal trifecta' of AI agent risks (private data access, untrusted content ingestion, external communication) and argues that these risks are already present on developer laptops with agents like Claude Code, Codex, and OpenClaw. It details prompt injection as a mechanism for exploiting these vulnerabilities and outlines three key architectural guardrails for mitigating these risks: 1) Cloud development environments to isolate agents, 2) a model proxy to log traffic and strip sensitive data before LLM provider interaction, and 3) an agent firewall to deny unauthorized commands and domains. The talk also touches on CISO concerns, shadow AI, and alert fatigue associated with large-scale agent deployment.