#isolation
2 articles
Beware: Your Coding Agent's Sandbox Was Leaking Its Own Credentials to Spawned Commands
A coordinated wave of security fixes across Gitlawb/zero and Goose shows the 'sandbox' you trusted was handing provider API keys, …
Your Background Subagents Can Leak Secrets — Build the Isolation Model
A reproducible Claude Code security issue shows background subagents stalling and emitting authorization-shaped prompt fragments. …