A deep-dive into designing a full AI coding IDE using only open-source components — FIM autocomplete, chat-in-editor, multi-file agents, repo understanding, and sandboxed code execution.
A hands-on AI agent tool abuse lab. An internal helper with three harmless tools reads cloud keys and posts them to an attacker. Then we fix the tools in code.
A hands-on indirect prompt injection lab. An AI assistant summarises a blog post and quietly emails private notes to an attacker. Then we fix it in code.
A hands-on prompt injection lab. One message gets a support chatbot to apply a 100% discount and leak its system prompt. Then we fix it in code and run the same attack again.