Security Guidance

prismatic7Security47
Get it for macOS

Pattern-matched security warnings for code the agent writes — 25 rules covering unsafe deserialization, injection, XSS, and crypto footguns.

Overview

View source

More from prismatic7

HeadroomContext budget monitoring — tells agents how much of the model's context window is used (real usage events, not estimates) and when to summarise or start fresh.104NoemaBridges BB threads to your own Noema server over its Streamable HTTP MCP endpoint for durable, searchable memory across sessions.5NoisegateAgent-invoked noise suppression — the agent can check short acknowledgements and filler against known noise patterns before sending.11Progressive SkillSmart skill index compaction — usage-ranked, budget-capped skill lists so agents load the right skills.87

More in Security 3

Protect credentials or prevent unsafe code.

View all
Env CatalogStore API keys, tokens, and secrets in a single encrypted catalog across all BB sessions and machines. Securely request credentials via masked in-app modals. Agents automatically check available credentials before prompting you, and persist newly provided keys on demand. Values are encrypted at rest with AES-256-GCM and synchronized via your central BB server. Includes dedicated agent tools, a full-featured management UI with .env import/export, and terminal CLI commands.Kirill Vechkasov31
Password GateLocks the bb app behind a password, so an unattended window stops exposing your threads. Set the password in Settings, and every window shows an unlock panel until someone enters it. Tick Trust this device once and that browser skips the prompt until the trust window ends. Forgot it? The panel covers the Settings page, so run `bb password-gate reset` in a terminal to open the app again. The lock is the app window, not your data: it does not stop anyone who can run commands on the bb machine or reach its port.rayzalzeroNew