A security researcher showed how a malicious AGENTS.md file placed in a Downloads folder could trick OpenAI Codex into installing malware, illustrating the risks of coding agents acting on untrusted local files.
AI coding agents fall for malicious instructions planted in the Downloads folder
A security researcher showed how a malicious AGENTS.md file placed in a Downloads folder could trick OpenAI Codex into installing malware, illustrating the risks of coding agents acting on untrusted local files.
Source: Helpnetsecurity