Lethal trifecta checker

Simon Willison's lethal trifecta is the combination of access to your private data, exposure to untrusted content, and a way to communicate externally. An agent with all three can be tricked into stealing your data. Tick what yours can do.

Runs in your browser; nothing is sent. The mapping from capability to leg is our reading, not a standard, and it is a simplification: adjust it to your setup. Passing this check does not make an agent safe. See the guide.

Capabilities of your agent session