coding agents

Apiiro found 1,122 public copies of .claude/settings.local.json holding at least one secret, saved when developers chose Yes, and don't ask again on commands containing passwords or keys.

An ETH Zurich preprint finds coding agents (three to five, depending on the setting) write less secure code when the repository already contains similar vulnerabilities, and that warnings and security prompts generally reduce the effect without removing it.