--- schema: 1 type: video title: 'The Lethal Trifecta Is Already on Your Laptops — Michael Patterson, Coder' description: >- Your coding agent can read private data, take in untrusted content and talk to the internet. That's the lethal trifecta, and it's already running on your developers' laptops. Michael Patterson, staff solutions engineer at Coder, explains Simon Willison's lethal trifecta (access to private data, exposure to untrusted content, and the ability to communicate externally) and why agents like Claude Code, Codex and OpenClaw running on a laptop hit all three. He covers prompt injection, what blocks big companies from rolling out agents (CISO concerns, shadow AI on personal subscriptions, alert fatigue, skeptical senior engineers), and three architectural guardrails: cloud development environments that isolate the agent, a model proxy that logs traffic and strips sensitive data before it reaches the LLM provider, and an agent firewall that denies commands and domains you didn't allow. In this talk: • What the lethal trifecta is, and why laptop agents hit all three parts • How prompt injection turns trusted sources into attacks • What security teams worry about when agents roll out at scale • Three guardrails: cloud dev environments, a model proxy and an agent firewall SPEAKER Michael Patterson, Staff Solutions Engineer, Coder LINKS Coder: https://coder.com The lethal trifecta (Simon Willison): https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ CHAPTERS 0:00 Intro 0:40 What is the lethal trifecta? 1:20 The agent boom 2:04 When agents delete production 4:04 What Coder does 5:24 The three ingredients 6:44 Prompt injection 8:09 Three pillars of agent security 10:08 Rolling out agents at big companies 12:48 What the CISO worries about 14:08 Alert fatigue 14:48 Skeptical engineers 15:33 Guardrail 1: Cloud dev environments 18:13 Guardrail 2: Model proxy 18:57 Guardrail 3: Agent firewall 20:12 Wrap-up Recorded at the AI Engineer World's Fair 2026 in San Francisco. Subscribe for more talks from the engineers building with AI. AI Engineer: https://ai.engineer YouTube: https://www.youtube.com/@aiDotEngineer X: https://x.com/aiDotEngineer LinkedIn: https://www.linkedin.com/company/aidotengineer/ #AISecurity #CodingAgents #AIEngineer canonical: >- https://liquidgold.cc/channel/aidotengineer/explore/video/the-lethal-trifecta-is-already-on-your-laptops-mich-06c342330645 markdown: >- https://liquidgold.cc/channel/aidotengineer/video/the-lethal-trifecta-is-already-on-your-laptops-mich-06c342330645.md llms: null parent: 'https://liquidgold.cc/channel/aidotengineer.md' channel: aidotengineer updated: '2026-10-23T22:19:23.545Z' language: null children: [] videoId: abw_m-DRi1k durationSeconds: 1244 publishedAt: '2026-10-10T15:00:03.000Z' searchChunks: - ordinal: 0 text: null startSeconds: 263 endSeconds: 333 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=263' heldReason: rights - ordinal: 1 text: null startSeconds: 346 endSeconds: 414 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=346' heldReason: rights - ordinal: 2 text: null startSeconds: 425 endSeconds: 491 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=425' heldReason: rights - ordinal: 3 text: null startSeconds: 503 endSeconds: 612 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=503' heldReason: rights - ordinal: 4 text: null startSeconds: 622 endSeconds: 769 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=622' heldReason: rights - ordinal: 5 text: null startSeconds: 769 endSeconds: 779 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=769' heldReason: rights - ordinal: 6 text: null startSeconds: 855 endSeconds: 865 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=855' heldReason: rights - ordinal: 7 text: null startSeconds: 944 endSeconds: 1100 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=944' heldReason: rights - ordinal: 8 text: null startSeconds: 1111 endSeconds: 1144 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=1111' heldReason: rights - ordinal: 9 text: null startSeconds: 1155 endSeconds: 1218 watch: 'https://liquidgold.cc/watch/abw_m-DRi1k?t=1155' heldReason: rights --- # The Lethal Trifecta Is Already on Your Laptops — Michael Patterson, Coder Your coding agent can read private data, take in untrusted content and talk to the internet. That's the lethal trifecta, and it's already running on your developers' laptops. Michael Patterson, staff solutions engineer at Coder, explains Simon Willison's lethal trifecta (access to private data, exposure to untrusted content, and the ability to communicate externally) and why agents like Claude Code, Codex and OpenClaw running on a laptop hit all three. He covers prompt injection, what blocks big companies from rolling out agents (CISO concerns, shadow AI on personal subscriptions, alert fatigue, skeptical senior engineers), and three architectural guardrails: cloud development environments that isolate the agent, a model proxy that logs traffic and strips sensitive data before it reaches the LLM provider, and an agent firewall that denies commands and domains you didn't allow. In this talk: • What the lethal trifecta is, and why laptop agents hit all three parts • How prompt injection turns trusted sources into attacks • What security teams worry about when agents roll out at scale • Three guardrails: cloud dev environments, a model proxy and an agent firewall SPEAKER Michael Patterson, Staff Solutions Engineer, Coder LINKS Coder: https://coder.com The lethal trifecta (Simon Willison): https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ CHAPTERS 0:00 Intro 0:40 What is the lethal trifecta? 1:20 The agent boom 2:04 When agents delete production 4:04 What Coder does 5:24 The three ingredients 6:44 Prompt injection 8:09 Three pillars of agent security 10:08 Rolling out agents at big companies 12:48 What the CISO worries about 14:08 Alert fatigue 14:48 Skeptical engineers 15:33 Guardrail 1: Cloud dev environments 18:13 Guardrail 2: Model proxy 18:57 Guardrail 3: Agent firewall 20:12 Wrap-up Recorded at the AI Engineer World's Fair 2026 in San Francisco. Subscribe for more talks from the engineers building with AI. AI Engineer: https://ai.engineer YouTube: https://www.youtube.com/@aiDotEngineer X: https://x.com/aiDotEngineer LinkedIn: https://www.linkedin.com/company/aidotengineer/ #AISecurity #CodingAgents #AIEngineer Canonical: https://liquidgold.cc/channel/aidotengineer/explore/video/the-lethal-trifecta-is-already-on-your-laptops-mich-06c342330645 · Channel: [AI Engineer](https://liquidgold.cc/channel/aidotengineer.md) > Search chunk text is held until public-source provenance is verified. ## Document chunks > Missing: no stored document chunks are available.