diff --git a/docs/visual-builder/index.md b/docs/visual-builder/index.md index e7ecc94f5..be5b61383 100644 --- a/docs/visual-builder/index.md +++ b/docs/visual-builder/index.md @@ -105,6 +105,13 @@ DiceAgent/ dice_tool.py # tool code ``` +!!! warning "Security Note" + When you upload or provide YAML agent configurations (for example, + `root_agent.yaml`), the `args` key (used in `CodeConfig.args` or + `ToolConfig.args`) is strictly blocked. If this key is present in your + configuration, it will result in an upload error. This is a security +measure to prevent arbitrary Remote Code Execution (RCE). + !!! note "Editing generated agents" You can edit the generated files in your development environment. However, @@ -124,4 +131,4 @@ Check out more information on the Agent Config code format used by Visual Builde and the available options: * [Agent Config](/agents/config/) -* [Agent Config YAML schema](/api-reference/agentconfig/) +* [Agent Config YAML schema](/api-reference/agentconfig/) \ No newline at end of file