Security Risks: Prompt Injection and Safety

Wes and Scott talk with Armin Ronacher and Mario Zechner about PI, a minimalist agent harness powering tools like OpenClaw. They unpack why Bash is “all you need,” the risks of agents, workflow adaptability, and where AI coding agents are actually headed.

Show Notes

• 00:00 Welcome to Syntax!
• 03:28 What is Pi, and why does it matter?
  • OpenClaw
• 05:54 What do we actually mean by “agents”?
• 11:04 Prompt injection: how LLMs get tricked
• 14:19 Is Claude Cowork actually secure?
• 22:01 How Armin and Mario use agents day to day
• 26:37 Brought to you by Sentry.io
• 27:25 Memory and search: teaching agents to remember
• 33:04 Do coding agents even need memory?
• 34:36 “Bash is all you need”
• 37:21 Adding power: how agents learn new tricks
• 47:02 Tools and models Armin and Mario are using right now
• 54:15 Sick picks + shameless plugs

Sick Picks

• Mario: Cards for Ukraine
• Armin: Pro-Ject Audio Turntable

Shameless Plugs

• Armin:
  • Thorsten Ball Newsletter
  • Simon Willison

Hit us up on Socials!

Syntax: X Instagram Tiktok LinkedIn Threads

Wes: X Instagram Tiktok LinkedIn Threads

Scott: X Instagram Tiktok LinkedIn Threads

Randy: X Instagram YouTube Threads