Tag

#nodejs

2 posts tagged.

maxInvocations does not count failed tool calls

The beeai-framework docs say onlySuccessInvocations affects forceAtStep. It also silently scopes maxInvocations, consecutiveAllowed, minInvocations and onlyAfter. Measured end to end on 0.1.31, with a control arm on every group.

October 12, 202611 min read110

Agent security

SSRF: your AI agent's URL tool can reach your internal network (Node)

If your agent has a tool that takes a URL, the model chooses where your server connects. Measured end to end on Node 24 with no dependencies and no API key: the guard most people write fails four ways, including the IPv4-mapped IPv6 bypass behind CVE-2026-56266, which also defeated the first version of my own hardened guard.

October 11, 202614 min read189