Security flaws in Anthropic’s and Google’s coding-agent repositories allowed a GitHub issue, opened by an account with no repository privileges, to execute code on CI runners. For OpenAI, it was enough to hijack the next agent run. These vulnerabilities highlight risks in AI agent configurations and their interaction with CI/CD pipelines, potentially exposing workflow secrets.