AI product Open source
BurritoBot is a deliberately permissive demo chat agent and burrito-ordering application used in the Unleash an Agent, Watch It Burn security workshop. Running as part of a Kubernetes-based internal developer platform, it uses kagent on Amazon Bedrock and can reach cluster operations and other tools, including listing pods, deploying images, reading files and secrets, and calling MCP tools. The workshop has participants repeat attacks against the agent while adding Kubernetes controls and agent-specific guardrails for its inputs, outputs, budget, tools, and permissions.
2 uses taken from transcripts — each links to the moment in the video.
The workshop's GitHub repository containing the entire platform used in the demo — an IDP integration with an agent, guardrails, and all supporting components. The presenters built it to demonstrate excessive agent agency on a Kubernetes cluster, and describe it as roughly 100 hours of work meant to be used as a model for standing up an IDP.
The deliberately permissive demo chat agent built for the workshop. It orders burritos but has tools to list pods, deploy images, read the file system, and call MCP tools, letting the audience hack it to deploy external images, find a secret recipe, and read internal configuration.
1 in the library.