Vibe Coding
Pattern: Coding Agents Are Expanding Out of the Repo and Into the Whole Work Surface
Two independent releases landed the same day, Aug 3: Cursor gave agents read/write access to Gmail, Drive, Calendar, Docs, and Sheets, and GitHub let issue/PR comments trigger Copilot cloud agent automations for docs, log investigation, and tech-debt filing. Both vendors are moving the trigger and the context out of the editor — the agent is becoming a participant in the org's communication channels rather than a tool you invoke in a repo. The security model has not moved with it: every new channel is a new untrusted-input path into an agent that can write code.
↳ Follow the thread