Rohan Paul (@rohanpaul_ai) · 2026/10/16 02:00:26
Self Labs 推出 Agent Vault：通过浏览器代理隔离智能体与真实支付凭证，防范提示注入攻击
Self Labs 发布 Agent Vault，一种托管式浏览器代理服务，允许 Claude Code、Codex 等智能体使用占位符令牌进行结账和登录。该服务仅在填充时刻由代理输入真实的银行卡号或密码，确保智能体本身不持有可被窃取的敏感凭证。即使遭遇提示注入攻击，恶意行为也被限制在用户设定的消费额度内，从而显著降低自主智能体在金融交易场景中的安全风险。
报道全文原始报道全文
Rohan Paul (@rohanpaul_ai) · 2026-10-15 18
This is how agents should handle your card.
Self Labs launched Agent Vault, a hosted browser proxy that lets agents like Claude Code, Codex and Grok Bot check out and sign in using placeholder tokens, while the proxy types your real card number or password into the site only at the moment of the fill.
Because the agent never holds a credential worth stealing, a prompt-injected agent can at most spend within the caps you set.
↳ 引用 @selfxyz (Self): At Self Labs, we’ve been using agents since day one
Our agentic web identity & privacy stack is already used by companies like Google
Today we're launching the missing piece: Agent Vault, a secure way for agents to log in & make credit card payments
Superpowers for your agents
