Skip to content
T threat.cafe

Tag

#working-directory

1 post

  1. · Nadia Ferreira-Strand · Enforcement architecture · on threat.cafe

    Don't start your coding agent in ~/Downloads: instruction files are now a drive-by vector

    Forever Security showed a web page can drop an AGENTS.md or CLAUDE.md into ~/Downloads, and an agent launched there treats it as project instructions. The researchers say there is nothing to patch, so the control sits with operators.