<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://sunglasses.dev/</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/ai-agent-readme-poisoning</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/ai-agent-security-101</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/author/cava</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/author/claude</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/author/jack</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/blog</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/blog/a2a-agents-talk-trust-to-act</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/agent-contract-poisoning</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/agent-data-exfiltration</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/agent-instruction-file-poisoning</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/agent-telemetry-metrics-poisoning</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/agent-workflow-evidence-contracts</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/agentic-cicd-security-runtime-trust</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-agent-hardening-c2-beaconing</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-agent-hardening-vs-runtime-trust</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-agent-security-usage-control-runtime-trust</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-bom-runtime-trust-agent-actions</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-ide-security-runtime-trust</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-supply-chain-attacks-2026</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/audit-that-almost-deleted-a-real-cve</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/checkpoint-ack-poisoning-ai-agent-workflows</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/claude-code-security-runtime-trust</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/endpoint-native-coding-agent-security-runtime-trust</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/mcp-security-for-ai-agents</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/mcp-tool-poisoning</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/runtime-trust-after-governance</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/session-boundaries-are-control-boundaries</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/skill-store-is-new-package-registry</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/stop-browser-agents-untrusted-links-redirects-callbacks</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/sunglasses-vs-lakera-comparison</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/tool-output-policy-override-primitive</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/why-http-bugs-are-an-ai-agent-security-risk</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/why-we-switched-to-mit</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/your-filter-stays-fresh-without-spyware</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/blog/zero-click-agent-attacks</loc><lastmod>2026-08-23</lastmod><priority>0.6</priority></url>
  <url><loc>https://sunglasses.dev/compare/sunglasses-vs-lakera</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/compare/sunglasses-vs-promptfoo</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/compliance</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/compliance/mitre-atlas</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/compliance/owasp-agentic-top-10</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/compliance/owasp-llm-top-10</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/contact</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/cookies</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/cvp</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/documentations</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/encyclopedia</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/faq</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/ai-ide-mcp</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/autogen</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/claude-code</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/crewai</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/hermes</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/langchain</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/openai-agents</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/openclaw</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/python</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/how-it-works/warp</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/indirect-prompt-injection-defense</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/manual</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/mcp-attack-atlas</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/mcp-tool-poisoning-detection</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/open-source-ai-agent-security-scanner</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/patterns</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/patterns/agent-workflow-publish-path-abuse</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/patterns/mcp-tool-handoff-abuse</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/patterns/package-dependency-registry-trust-abuse</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/patterns/policy-scope-redefinition</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/patterns/prompt-injection</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/privacy</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/prompt-injection-protection-for-ai-agents</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/python-prompt-injection-detection-library</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/report-axios-rat</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/report-claude-code-supply-chain-attack</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/report-wordpress-bot-attacks</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/agent-discovery-metadata-poisoning</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-family-synthesis-april-2026</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-haiku-4-5-evaluation</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-opus-4-6-evaluation</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-opus-4-7-effort-evaluation</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-opus-4-7-evaluation</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-opus-4-7-evaluation-run-2</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-run7-comment-and-control</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/anthropic-cvp-sonnet-4-6-evaluation</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/fake-ai-agents-credential-recon-august-2026</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/reports/openai-sandbox-escape-hugging-face-breach</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/reports/ci-safe-input-filter-for-ai-agents</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/reports/miasma-hades-ai-coding-agent-supply-chain</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/scan</loc><lastmod>2026-08-23</lastmod><priority>0.9</priority></url>
  <url><loc>https://sunglasses.dev/team</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/thesis</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/what-is-skillcloak</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/what-sunglasses-catches-vs-does-not-catch</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/benchmark</loc><lastmod>2026-08-23</lastmod><priority>0.8</priority></url>
  <url><loc>https://sunglasses.dev/manual/chapter-02-hardening-checklist</loc><lastmod>2026-08-23</lastmod><priority>0.9</priority></url>
  <url><loc>https://sunglasses.dev/blog/copilot-instructions-attack-runtime-trust</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-agent-runtime-security-evidence-checks</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-agent-context-security-provenance-authorization</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-agent-trust-boundaries-for-data-and-actions</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/blog/secure-ai-agent-tool-access-boundaries</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/blog/ai-supply-chain-model-output-trust</loc><lastmod>2026-08-23</lastmod><priority>1.0</priority></url>
  <url><loc>https://sunglasses.dev/llms.txt</loc><lastmod>2026-08-23</lastmod><priority>0.5</priority></url>
  <url><loc>https://sunglasses.dev/llms-full.txt</loc><lastmod>2026-08-23</lastmod><priority>0.5</priority></url>
</urlset>
