<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>静态扫描 :: 标签 :: x7peeps</title><link>https://x7peeps.com/tags/%E9%9D%99%E6%80%81%E6%89%AB%E6%8F%8F/index.html</link><description/><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Mon, 02 Nov 2026 20:45:00 +0800</lastBuildDate><atom:link href="https://x7peeps.com/tags/%E9%9D%99%E6%80%81%E6%89%AB%E6%8F%8F/index.xml" rel="self" type="application/rss+xml"/><item><title>把删除命令藏进一条“没有命令”的语句里：编码Agent权限策略的扫描盲区</title><link>https://x7peeps.com/AI/08-%E5%AE%89%E5%85%A8%E4%B8%8EAI%E8%9E%8D%E5%90%88/%E6%8A%8A%E5%88%A0%E9%99%A4%E5%91%BD%E4%BB%A4%E8%97%8F%E8%BF%9B%E4%B8%80%E6%9D%A1%E6%B2%A1%E6%9C%89%E5%91%BD%E4%BB%A4%E7%9A%84%E8%AF%AD%E5%8F%A5%E9%87%8C%E7%BC%96%E7%A0%81Agent%E6%9D%83%E9%99%90%E7%AD%96%E7%95%A5%E7%9A%84%E6%89%AB%E6%8F%8F%E7%9B%B2%E5%8C%BA/index.html</link><pubDate>Mon, 02 Nov 2026 20:45:00 +0800</pubDate><guid>https://x7peeps.com/AI/08-%E5%AE%89%E5%85%A8%E4%B8%8EAI%E8%9E%8D%E5%90%88/%E6%8A%8A%E5%88%A0%E9%99%A4%E5%91%BD%E4%BB%A4%E8%97%8F%E8%BF%9B%E4%B8%80%E6%9D%A1%E6%B2%A1%E6%9C%89%E5%91%BD%E4%BB%A4%E7%9A%84%E8%AF%AD%E5%8F%A5%E9%87%8C%E7%BC%96%E7%A0%81Agent%E6%9D%83%E9%99%90%E7%AD%96%E7%95%A5%E7%9A%84%E6%89%AB%E6%8F%8F%E7%9B%B2%E5%8C%BA/index.html</guid><description>一个编码 Agent 配好了最严格的 shell 策略：除白名单外一切命令拒绝执行。测试时 cat 被拦、rm 被拦、git push 被拦。然后有人在 Windows 上输入了这么一行：
[System.IO.File]::Delete("C:\\temp\\probe.txt") 文件删了。没有弹窗，没有拒绝记录，权限系统压根没出手。</description></item></channel></rss>