{
  "id": 2486473,
  "title": "topowatch: audita el Attack Success Rate de tu workspace contra inyección indirecta",
  "url": "https://urgent.news/2026/08/22/topowatch-audita-el-attack-success-rate-de-tu-workspace-contra",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-22T03:15:02.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/magopredator/topowatch-audita-el-attack-success-rate-de-tu-workspace-contra-inyeccion-indirecta-2klh"
  },
  "original_language": "es",
  "account": "topowatch is a command-line tool that measures the Attack Success Rate (ASR) of indirect reference injection in coding assistants. It was developed based on the paper Workspace Topology as an Attack Vector in Agentic Coding Assistants (arXiv:2608.14876, Day et al., 2026). The tool assesses ASR by measuring the fraction of workspace the agent reads under different topologies like monolithic, modular, and deep nesting. The findings reveal that highly modular environments have significantly lower ASR compared to linear structures. To achieve this, topowatch uses a configurable synthetic agent and a fixture with three topologies. It is written in Python and can be installed using pip. However, the current version v0.1 only uses a synthetic agent, not a real coding assistant, and thus, the claim that modularity leads to lower ASR is only valid for this reproducible fixture. Version 0.2 aims to measure ASR against real coding assistants in a sandbox environment without credentials. Version 0.3 will provide automatic recommendations for restructuring and a plugin for CoreDefense. The repository is available at https://github.com/amurlaniakea/topowatch under the AGPL-3.0-or-later license, and the author is Pedro Sordo Martínez.",
  "summary": "Tu agente de código lee tu workspace. Un archivo envenenado en cualquier rincón puede llevar instrucciones que el agente ejecuta. ¿Sabes qué fracción de tu workspace tiene que leer para que eso ocurra? topowatch mide eso. El problema no es el prompt, es la topología El paper Workspace Topology as an Attack Vector in Agentic Coding Assistants (arXiv:2608.14876, Day et al., 2026) demostró algo que…",
  "key_points": [
    "topowatch measures Attack Success Rate (ASR) of indirect reference injection",
    "Highly modular environments have significantly lower ASR",
    "Version 0.2 aims to measure ASR against real coding assistants"
  ],
  "editors_take": "The development of topowatch enables a more informed approach to mitigating indirect reference injection attacks in coding assistants by highlighting the benefits of modular workspace environments.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}