Skip to the card

Card 746 of 9902026-10-06 issue

Observed arrival · 2026-10-06

Sherlock checks what AI agents can do together

sherlocksec.org Visit website
Editorial interest 84/100 Selection signal · not a rating of the site

Sherlock presents a local scanner and browser-based checker for finding attack paths across AI agents sharing a developer’s machine.

Landing page captured for the 2026-10-06 issue.
For
Teams reviewing AI coding agents on developer machines
Worth noticing
The scanner reads approval settings for 15 named agents and treats settings it cannot read as unrestricted.

Field notes

The scan flow copies results to the clipboard for checking in the browser; the page says Linux users can print the results and provide a file instead. The listed checks cover approval settings for 15 agents, while agents whose settings cannot be read are modeled as unrestricted. A separate LangGraph walkthrough exposes its formula and solver steps.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use

One card from the complete issue

Original Bugs Included

353,261 arrived 1,000 judged 990 catalogued Enter the complete issue
sherlocksec.org

Landing page observed 2026-10-06. The live site may have changed.