BREAKING
GuardFall Bypasses 10 of 11 AI Agents
0
agents tested
0
agents bypassed
0
K
GitHub stars
How GuardFall Slips Past Filters
1
Text filter checks string
↓
2
Marked 'safe'
↓
3
Bash expands command
↓
4
Dangerous exec
Probe Leaks by Tool
opencode
16
Goose
22
Continue vs the Rest
Continue
Defended
●
Evaluates real Bash execution
●
Hard block on destructive commands
10 others
Bypassed
●
Rely on text pattern matching
●
Cannot model Bash expansion
Treat In-Repo Configs as Untrusted
AI NEWS BLITZ
Security firm Adversa AI found a shell bypass hitting nearly every open-source AI coding agent it tested.