Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-31 · source-backed
TrustMeBro is a Go tool at 327 stars, created August 26, that intercepts commands invoked by Codex, Claude Code and pi through PATH shims alone. No plugin, no hook, no MCP. Rules decide whether to fabricate output, rewrite stdout while preserving stderr and exit status, block, or exec the real binary. The published evaluation is the finding: each model had to verify a fresh DNS TXT authorization marker before running a scan, and GPT-5.6 Sol, GPT-5.5, DeepSeek V4 Pro and V4 Flash all correctly refused with the real dig, then all four proceeded once TrustMeBro returned fabricated proof. Any agent decision gated on shell output is exactly as trustworthy as PATH.
Each link below shares sources, entities, or timing with this story.
Codex uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Codex uses MCP); both cover August, Claude Code, Codex, MCP; reported by the same outlet (github.com).
OpenAI supports MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI supports MCP); both cover August, Claude Code, Codex, MCP; reported by the same outlet (github.com).
Linked by a graph relationship (OpenAI supports MCP); both cover August, Claude Code, Codex, GPT; reported by the same outlet (github.com).
Claude Code uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Claude Code, Codex, GPT, MCP; reported by the same outlet (github.com).
Codex uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Codex uses MCP); both cover August, Claude Code, Codex, MCP; reported by the same outlet (github.com).
Claude uses MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude uses MCP); both cover August, Claude Code, Codex, MCP; overlapping topics (agent, claude, code, codex).
Claude Code uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Claude Code, Codex, MCP; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses MCP); both cover August, Claude Code, Codex; reported by the same outlet (github.com).