Skip to content

DEV Community

← All Trends

AI Coding Agent Hijacking via Downloads Folder

19 posts in this trend in the last 7 days • Active about 2 hours ago

mech.app

Oct 31

AGENTS.md Poisoning: Why Your Downloads Folder Is a Security Boundary for Coding Agents

#llm #security #agents #cybersecurity

5 min read

Oct 27

Markdown Is the New Executable: What the AGENTS.md-in-Downloads Attack Teaches Us About Coding Agent Security

#ai #security #agents #llm

7 min read

Dekita

Oct 30

Stop launching your coding agent from Downloads. Here is a 30-second pre-flight check.

#ai #agents #security #devtools

5 min read

Oct 27

How a Downloads Folder File Can Hijack Your AI Coding Agent

#security #ai #devops #opensource

7 min read

Oct 27

Beware of the Markdown File in Your Downloads Folder

#agents #ai #llm #security

4 min read

Oct 26

Web Pages Can Command AI Coding Agents: Over 90% Success Through the Downloads Folder

#security #cybersecurity #ai #programming

5 min read

Cor E

Oct 31

A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

#security #ai #llm #appsec

5 min read

Oct 30

Stop Untrusted Repo Files From Steering Coding Agents

#ai #security #agents #devops

9 min read

jamilxt

Oct 27

Stop Coding Agents From Trusting Downloads: Build a Workspace Preflight

#ai #security #python #agents

9 min read

mech.app

Oct 27

Markdown as Malware: How AI Agents Turn Downloads Folders into Instruction Injection Vectors

#agents #ai #cybersecurity #security

6 min read

Oct 26

Securing Your AI Coding Agents: The "AGENTS.md" Hijacking Risk

#ai #security #devtools #programming

2 min read

Oct 31

A web page told my coding agent what to do. It never asked me.

#ai #security #typescript #agents

3 min read

Oct 28

The AGENTS.md your agent reads as an order

#agents #ai #security #sandbox

3 min read

Oct 28

Malicious Downloads Can Hijack AI Coding Agents and Steal Tokens

#agents #security #ai #cybersecurity

4 min read

mech.app

Oct 30

Indirect Prompt Injection via Repository Files: How Coding Agents Inherit Instructions from Untrusted Sources

#security #agents #llm #cybersecurity

5 min read

Oct 29

A Web Page Dropped AGENTS.md in Downloads. Codex Obeyed It in 90%+ of Tests

#security #ai #codex #claudecode

8 min read

Sarah Reid

Oct 27

Your AGENTS.md Is an Attack Surface: How a Trusted File Hijacked Codex and Claude Code

#ai #security #agents #llm

5 min read

Oct 29

Prompt injection in AI coding agents: how one CLAUDE.md or AGENTS.md can hijack them

#ai #security #claudecode #codex

6 min read

Trend Analysis

Researchers have uncovered a novel attack vector where malicious text and markdown files, such as AGENTS.md placed in a user's Downloads folder, trick AI coding agents into executing arbitrary commands. Developers are urgently discussing how default browser downloads combined with inherent agent trust in local instruction files create severe security risks without requiring traditional software exploits.

Core Questions Under Debate:

How can developers prevent AI coding agents from blindly trusting local instruction files?
What are the best preflight checks or workspace configurations to secure agent execution environments?
How do automated browser downloads facilitate prompt injection and unauthorized command execution?

First detected: October 30, 2026

Last updated: about 2 hours ago

Algorithm: Vector Leader Clustering (threshold: 82%)

About this trend

This trend groups posts from the last 7 days that discuss similar concepts, technologies, or ideas.