AI Agents5 min read
The Security Architecture of AI Coding Agents
Hugging Face's Slack bot queries production data. The LLM never sees the keys
Hugging Face runs an internal Slack coding agent, Moon Bot, that can query production databases and open PRs. Its security design keeps credentials out of the model's reach via Okta tiers, sandboxed bash, and local reverse proxies that inject keys server-side.
2026-08-04