{
 "generated": "2026-11-01",
 "node": {
  "id": "layer:agent-security--6",
  "type": "Layer",
  "name": "沙盒逃逸 / 越权操作",
  "slug": "agent-security--6",
  "map": "agent-security",
  "map_title": "Agent 安全攻击面",
  "num": 6,
  "step": "Layer 06",
  "role": "当上面几类攻击面升级为实际破坏性执行——Agent 拿到了超出预期范围的权限，或者干脆跳出了本该限制它的隔离环境。",
  "n_cards": 4,
  "page": "/landscape/agent-security/#layer-6",
  "degree": 0
 },
 "page": "https://xiaopingfeng.com/graph/e/layer/agent-security--6/",
 "out": [
  {
   "type": "flows_to",
   "sentence": "总览图里的箭头：沙盒逃逸 / 越权操作 → 失控遏制",
   "direction": "out",
   "id": "layer:agent-security--7",
   "name": "失控遏制",
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」总览图：第 6 层指向第 7 层",
     "url": "https://xiaopingfeng.com/landscape/agent-security/"
    }
   ]
  }
 ],
 "in": [
  {
   "type": "placed_in",
   "sentence": "Replit出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "org:replit",
   "name": "Replit",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「Replit Agent 删除生产数据库」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-replit"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Replit Agent 删除生产数据库出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "event:replit-agent-production-db-deletion",
   "name": "Replit Agent 删除生产数据库",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「Replit Agent 删除生产数据库」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-replit"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "OpenAI出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "org:openai",
   "name": "OpenAI",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「OpenAI 红队Agent突破Hugging Face」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-openai-hf-breakout"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Hugging Face出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "org:hugging-face",
   "name": "Hugging Face",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「OpenAI 红队Agent突破Hugging Face」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-openai-hf-breakout"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "OpenAI 红队Agent突破Hugging Face出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "event:openai-agents-hugging-face-breakout",
   "name": "OpenAI 红队Agent突破Hugging Face",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「OpenAI 红队Agent突破Hugging Face」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-openai-hf-breakout"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "「追凶Neo」：野外首次抓获的攻击型 AI Agent出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "event:neo-attack-agent",
   "name": "「追凶Neo」：野外首次抓获的攻击型 AI Agent",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「\"追凶Neo\"：野外首次抓获的攻击型AI Agent」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-neo-agent"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Wiz出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "org:wiz",
   "name": "Wiz",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「Wiz：AI生成代码引入漏洞，被另一个AI攻破」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-wiz-snowflake"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Wiz：AI生成代码引入漏洞，被另一个AI攻破出现在 Landscape 的「沙盒逃逸 / 越权操作」",
   "direction": "in",
   "id": "event:wiz-snowflake-ai-code-chain",
   "name": "Wiz：AI生成代码引入漏洞，被另一个AI攻破",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 06 层「沙盒逃逸 / 越权操作」：卡片「Wiz：AI生成代码引入漏洞，被另一个AI攻破」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-wiz-snowflake"
    }
   ]
  },
  {
   "type": "flows_to",
   "sentence": "总览图里的箭头：记忆 / RAG污染 → 沙盒逃逸 / 越权操作",
   "direction": "in",
   "id": "layer:agent-security--4",
   "name": "记忆 / RAG污染",
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」总览图：第 4 层指向第 6 层",
     "url": "https://xiaopingfeng.com/landscape/agent-security/"
    }
   ]
  }
 ]
}