Field notes

The Authsome.
blog

Notes from the team behind Authsome. Integration patterns, agent credential workflows, security tradeoffs, and product updates — written for builders, not buyers.

13 posts15 tagsRSS

Filtering by#opinionClear filters

How prompt injection becomes credential exfiltration.

Apr 22, 2026•9 min read

How prompt injection becomes credential exfiltration

Six real attacks from 2025-2026, the common thread between them, and why filter-the-input defenses can't fix it.

Priyansh Khodiyar

security agents opinion

Read post

Stop putting API keys in environment variables.

Apr 19, 2026•10 min read

Stop putting API keys in environment variables

The tutorial pattern that everyone copies has six known leak vectors. Here's how each one fires in production, and what to do instead.

Priyansh Khodiyar

security opinion agents

Read post

The Authsome.blog

How prompt injection becomes credential exfiltration

Stop putting API keys in environment variables

The Authsome.
blog