Vibe Coding
Pattern: four coding agents shipped fixes treating repo-supplied config as hostile input within 48 hours
Between 09-23 and 09-25, Claude Code 2.1.282 stopped project settings from enabling OTEL export and stopped repo skills from pre-approving their own tools. Kimi Code 2.1.0 deferred project config until trust and blocked repo git config from running commands. Gemini CLI 0.61.0 gated build commands after build-file edits, and Codex 0.157.0 tightened MCP and network boundaries. The common threat is a cloned repository or fetched page steering the agent through config it didn't write. When you evaluate a coding agent, ask which files in a fresh clone it will act on before you approve the workspace.
↳ Follow the thread