News Score: Score the News, Sort the News, Rewrite the Headlines

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

One questionThis research began with a single question: what does a CLI AI agent actually do when it starts up? What happens under the hood?Upon looking at several AI agents, we observed the same behaviour, they gather context about the project they have just been opened in. A good part of that gathering is done with git, called for different purposes at different moments, some on start-up, some once the session begins.Looking at how git is used, we found a vulnerable pattern. Those context-gath...

Read more at manifold.security

© News Score  score the news, sort the news, rewrite the headlines