Coding Agents Turn the Workstation Into the Breach

What this establishes institutionally is a collapse of the old trust ceremony around developer tools. The dangerous moment is no longer install time or credential theft alone; it is the routine act of opening a project, accepting agent assistance, and letting automation interpret repository content as instruction. Lyrie’s account of late-April agent flaws ties the Cursor and Gemini CLI cases to the same mechanism: autonomous Git or configuration-loading operations against attacker-controlled project material through the same mechanism. Security teams that treat coding agents as editors will under-scope them; teams that…