The Lethal Trifecta Is Already on Your Laptops — Michael Patterson, Coder

Your coding agent can read private data, take in untrusted content and talk to the internet. That's the lethal trifecta, and it's already running on your developers' laptops. Michael Patterson, staff solutions engineer at Coder, explains Simon Willison's lethal trifecta (access to private data, exposure to untrusted content, and the ability to communicate externally) and why agents like Claude Code, Codex and OpenClaw running on a laptop hit all three. He covers prompt injection, what blocks big companies from rolling out agents (CISO concerns, shadow AI on personal subscriptions, alert fatigue, skeptical senior engineers), and three architectural guardrails: cloud development environments that isolate the agent, a model proxy that logs traffic and strips sensitive data before it reaches the LLM provider, and an agent firewall that denies commands and domains you didn't allow. In this talk: • What the lethal trifecta is, and why laptop agents hit all three parts • How prompt injection turns trusted sources into attacks • What security teams worry about when agents roll out at scale • Three guardrails: cloud dev environments, a model proxy and an agent firewall SPEAKER Michael Patterson, Staff Solutions Engineer, Coder LINKS Coder: https://coder.com The lethal trifecta (Simon Willison): https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ CHAPTERS 0:00 Intro 0:40 What is the lethal trifecta? 1:20 The agent boom 2:04 When agents delete production 4:04 What Coder does 5:24 The three ingredients 6:44 Prompt injection 8:09 Three pillars of agent security 10:08 Rolling out agents at big companies 12:48 What the CISO worries about 14:08 Alert fatigue 14:48 Skeptical engineers 15:33 Guardrail 1: Cloud dev environments 18:13 Guardrail 2: Model proxy 18:57 Guardrail 3: Agent firewall 20:12 Wrap-up Recorded at the AI Engineer World's Fair 2026 in San Francisco. Subscribe for more talks from the engineers building with AI. AI Engineer: https://ai.engineer YouTube: https://www.youtube.com/@aiDotEngineer X: https://x.com/aiDotEngineer LinkedIn: https://www.linkedin.com/company/aidotengineer/ #AISecurity #CodingAgents #AIEngineer