Tags
“Yes, and don’t ask again” in Claude Code can save a typed password word-for-word in a project settings file. Apiiro traced that to 1,122 public GitHub files exposing secrets. Have you ever pasted an API key straight into a command for an agent to run?
OpenAI’s dots gained a new skill, reading sign-up codes from your email to finish a 2FA check for you, though reports differ on whether they enter the code or pause first. Would you let an agent read the inbox where your 2FA codes arrive?
“How our systems interact with third-party services” is where OpenAI wants Hacktron to dig, and the team gets wider frontier model access through Daybreak Red to do it. Does your team test third-party integrations with AI agents or by hand?
