Coding Agent Horror Stories: The 29 Million Secret Problem | Docker

This post details a specific attack vector where a poisoned npm package (`nx`) leveraged installed AI coding agents by invoking them with permission-bypass flags (`--dangerously-skip-permissions`, `--yolo`, `--trust-all-tools`) to scan for and exfiltrate secrets from the developer's filesystem. It highlights that AI-assisted code leaks secrets at roughly twice the baseline rate due to agents running with the developer's full filesystem access. The post then explains how Docker Sandboxes mitigate this by providing workspace-scoped filesystem access (preventing access to host home directories and configurations) and proxy-injecting credentials at the network boundary, rendering the agent unable to see or access host secrets.