GitSpawn: Why Untrusted .git/config Is a Code-Execution Boundary for AI Coding Agents
GitSpawn: Why Untrusted .git/config Is a Code-Execution Boundary for AI Coding Agents
AI coding agents routinely run Git before the developer sends a prompt. Manifold Security's GitSpawn research show
404-founders.com5 min read