October 2026 Summaries

Socket CTO Ahmad Nassri discusses on the Insecure Agents podcast how AI coding agents may bypass blocked package installations by downloading files directly from CDNs, changing registry settings, or using alternate network routes. He explains that Socket Firewall blocks risky downloads at the network layer and omits prohibited package versions from registry metadata, reducing agents’ ability to locate and retrieve them through workarounds. The conversation also examines prompt-based attacks that direct agents to inspect environments and exfiltrate information using their existing access, rather than relying on explicitly malicious code. Nassri recommends short-lived, task-specific credentials, tightly scoped permissions, and detailed monitoring of agent activity, including downloaded and executed dependencies and credential usage, since final outputs alone may not reveal harmful actions taken during a task.