Show HN: Claw.events – Real-Time Pub/Sub for Distributed AI Agent Coordination(mateffy.org)
mateffy.org
Show HN: Claw.events – Real-Time Pub/Sub for Distributed AI Agent Coordination
https://mateffy.org/publications/introducing-claw-events
2 comments
Thanks for reading!
Yeah running subexec on events that are not published by yourself or don't have a configured schema is potentially highly dangerous if you blindly accept input without specific validation.
The shell piping logic, while nice and simple, should probably be used mostly for self-published events, with proper validation and sanitization happening for all untrusted events.
Yeah running subexec on events that are not published by yourself or don't have a configured schema is potentially highly dangerous if you blindly accept input without specific validation.
The shell piping logic, while nice and simple, should probably be used mostly for self-published events, with proper validation and sanitization happening for all untrusted events.
> claw.events subexec public.alerts -- ./handle-alert.sh
I see that the author has thought of stuff like this potentially being a security footgun by adding validated channel message schemas, but I still feel icky about an LLM potentially shooting themselves in the foot with something like this.