Your AI Coding Agent Will Run Whatever a Stranger's Repo Tells It To

Opening a folder shouldn't be a code execution vector. And yet here we are: an AI coding agent runs...