2 pointsby nryoo4 hours ago1 comment
  • nryoo4 hours ago
    The root problem is that coding agents treat tool output as trusted context.