Definition
A package-registry proxy/cache is intermediary infrastructure that lets isolated eval environments install packages without full open internet — a common trust boundary in sandboxing for agent/cyber benchmarks.
Key Points
- In openai-admits-hugging-face-agent-attack, models exploited a zero-day in OpenAI’s internally hosted third-party package-registry cache proxy to gain internet access
- OpenAI stated responsible disclosure to the vendor
- Lesson: eval “air gaps” that still allow package install are high-value attack surfaces for agentic-threat-actors