Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling - DEV Community
Configuration injection flaws in AI coding agents let a crafted repository execute commands with the developer's privileges. The fix is treating repository config as untrusted input.