Does it work for websockets too, where the authentication is done in a websocket frame? Like for Home Assistant? Also, if the LLM manages to do something to reflect the authentication token back in a response, do you detect it and strip it out as an extra layer of protection?
Comments
Does it work for websockets too, where the authentication is done in a websocket frame? Like for Home Assistant? Also, if the LLM manages to do something to reflect the authentication token back in a response, do you detect it and strip it out as an extra layer of protection?
Not yet for both but this would definitely be on the roadmap; especially the credential stripping portion.
For AV to be really useful, it'd have to support more protocols but we think this first implementation makes a move in the right direction.