Blog
Analysis, notes from the field, and commentary on AI security.
General
No posts here yet.
Coding Agent Security
Claude Code
Claude Code runs in your terminal with your permissions. This post covers the risks, the 2026 incidents that began when a developer opened a repository, their impact, and the settings, hooks, checks and habits that control them.
claude-codecoding-agentsagentsprompt-injectionleast-privilegesandboxing
Codex
OpenAI Codex runs commands on your machine with your permissions. This post covers the risks, the CVEs that began with opening a repository, their impact, and the configuration, rules, checks and habits that control them.
codexopenaicoding-agentsagentsprompt-injectionleast-privilege
GitHub Copilot
GitHub Copilot's agents run commands with your permissions. This post covers the risks, the incidents that turned injected text into commands, their impact, and the settings, checks and habits that control them.
github-copilotcoding-agentsprompt-injectionleast-privilegesandboxingsupply-chain
Cursor
Cursor's agent runs commands with your permissions. This post covers the risks, the incidents that turned configuration into code execution, their impact, and the settings, checks and habits that control them.
cursorcoding-agentsprompt-injectionleast-privilegesandboxingsupply-chain
Gemini Code Assist
Gemini CLI and Code Assist agent mode run commands with your permissions. This post covers the risks, the incidents, their impact, and the settings, checks and habits that control them.
geminicoding-agentsprompt-injectionleast-privilegesandboxingsupply-chain