Tutorials

Hands-on notes on evals, red-teaming and shipping

Exfiltration evals: the markdown image is the outbound request

September 28, 2026 · Judgeworthy

Your injection suite watches tool calls. The easiest way out of an agent is a rendered markdown image that the browser fetches before anyone reads the answer. Here is a channel inventory, a canary, and a pytest suite that asserts on destinations rather than payloads.

Read more