Tags
Goldman Sachs gives staff AI tools “to determine the best use cases,” and per Bloomberg, its October guidance keeps Claude Code and GitHub for engineers only. At your company, are coding agents open to everyone or just to engineers?
“Yes, and don’t ask again” in Claude Code can save a typed password word-for-word in a project settings file. Apiiro traced that to 1,122 public GitHub files exposing secrets. Have you ever pasted an API key straight into a command for an agent to run?
Claude Code wrote signed-in users’ own email addresses into the User-Agent of curl calls it built, and the npm stable channel, 2.1.311 on November 6, has no check against it. Have you ever looked at what headers your coding agent sends?
