BREAKING
AI Coding Agents Tricked via README
How Friendly Fire Runs Code
1
Inject prompt in README
↓
2
User asks agent to review
↓
3
Agent runs payload
Targeted Autonomous Modes
Claude Code
auto-mode
●
CLI 2.1.116-2.1.199
●
Sonnet 4.6/5, Opus 4.8
Codex
auto-review
●
CLI 0.142.4
●
GPT-5.5
Defense Tools Become Attack Path
Advice: Turn Off Auto Mode
Guardrails Under Question
AI NEWS BLITZ
A new proof-of-concept turns defensive AI coding agents into an attack path.