GitSpawn

Named by 3 kept items in this workspace.

1 items name it under classification.key entities, 1 under techniques and 1 under tools.

Search every workspace for GitSpawn. It matches the name as written, so it can find other things that share it.

The items that name it 3

Top AI Coding Agent Security Resources — October 2026
articleas classification.key entities2026-10-02
GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security
writeupas techniques2026-09-01
A repository's own .git/config sets a command-execution git setting (e.g. core.fsmonitor, or another unnamed setting of the same kind) that names a program; when an AI coding agent runs a background git command (e.g. git status, git diff) to gather repository context, git refreshes its index and inv
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
articleas tools
Name under which Manifold Security published its findings on this vulnerability class

All techniques in this workspace.