---
title: "Discussion on \"AI Coding Agent Security Flaws: Claude Code, Gemini, Codex\" | Hashnode"
description: "Discussion on \"AI Coding Agent Security Flaws: Claude Code, Gemini, Codex\". An AI coding agent reads files written by other people, runs commands with your privileges, and sees your secrets. AI coding agent security is therefore not a theoretical topic: between June 2025 and"
url: "https://hashnode.com/posts/ai-coding-agent-security-flaws-claude-code-gemini-codex/6aba84b220e0c0bf999ad89f"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [AI Coding Agent Security Flaws: Claude Code, Gemini, Codex](https://thomastartrau.hashnode.dev/ai-coding-agent-security-flaws-claude-code-gemini-codex?utm_source=hashnode&utm_medium=feed)

An AI coding agent reads files written by other people, runs commands with your privileges, and sees your secrets. AI coding agent security is therefore not a theoretical topic: between June 2025 and

Sep 28 · 15 min read · thomastartrau.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#claude-code](https://hashnode.com/tag/claude-code)
-   [#ai](https://hashnode.com/tag/ai)
-   [#ai-agents](https://hashnode.com/tag/ai-agents)

## Written by

[Thomas Tartrau](https://hashnode.com/@thomastartrau)

@thomastartrau · Paris, France

  
[View profile](https://hashnode.com/@thomastartrau)

## Responses 1

Markdown supported · ⌘↵ to post

[Rulestack](https://hashnode.com/@rulestack)

[Sep 28](https://hashnode.com/posts/ai-coding-agent-security-flaws-claude-code-gemini-codex/6aba84b220e0c0bf999ad89f/comment/6abab4802849b016e5cde418)

Your pattern 2 shows up from the deny side as well. In a throwaway repo we put a single rule, Bash(git push:\*), in .claude/settings.json and had Claude Code 2.1.278 run 14 spellings of a push: it stopped 8, and 5 still reached the remote, including git -c ... push, git 'push' and sh -c "git push". To us it looked like the same gap as your Bash(git \* main) example: the rule matched the text Claude wrote rather than what the shell ended up running.