Opening a stranger's repo with a coding agent? Sandbox it first
23 October 2026
Researchers showed that git settings and agent config files inside a repo can make Claude Code, Codex, Cursor and others run commands the moment the agent touches git — before you approve anything. For unfamiliar repos, run the agent in a throwaway container or VM, and read .git/config and any agent settings folders before letting it loose.
Based on reporting by Adversa AI. Read their full coverage for details.