48/100
An agentic coding tool asked to clone and set up a benign-looking GitHub repository could execute a malicious payload that is reportedly invisible to security scanners, AI agents and human reviewers. Organisations using AI coding agents should restrict their execution privileges and sandbox repository setup tasks.