1 comments

  • nryoo 8 hours ago ago

    The root problem is that coding agents treat tool output as trusted context.