Manifold Security has uncovered eight security flaws across seven command-line AI coding agents, including Claude, Codex, and Cursor. These vulnerabilities stem from malicious Git configurations that can name a command, which the agent then executes on the developer’s machine without a sandbox or approval prompt. Exploitation requires the repository to be cloned, posing a supply chain risk for developers using these AI tools.