Your coding agent runs a shell on your machine. I audited mine.

A coding agent that can run bash on your laptop is a remote shell on localhost. It has that threat model whether or not anyone designed for it — browser drive-bys, DNS rebinding, curl | bash , the twe...