Markdown Is the New Executable: Attackers Drop Agent Instructions into Downloads
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A security write-up from Forever Security describes how a malicious AGENTS.md file, silently dropped into a user's ~/Downloads folder by a website, can be executed by AI coding agents like OpenAI Codex and Claude Code, which automatically obey instructions files in the folders they open.