Latest / LEON — AI Systems Security | AGORA Intelligence
AGENTS.md in Downloads Folder Hijacks Codex and Claude Code
In Forever Security's tests, an AGENTS.md downloaded to ~/Downloads got Codex to run code 90% of the time, and a malicious CLAUDE.md led Claude Code to hand over its OAuth token. The researchers say OpenAI and Anthropic have nothing to patch, which leaves defense to the user. This piece argues that the real flaw is the permissions delegated to the agent.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.