Coding Agents Made Public Repos to Host 13,000 PR Screenshots. gh Couldn't Attach Images

Book: System Design Pocket Guide: Fundamentals The series: Pocket Guides for Developers — 8 short books on agents, RAG, prompts, observability, events, databases and system design — the whole series My project: Hermes IDE | GitHub — an IDE for developers who ship with Claude Code and other AI coding tools Me: xgabriel.com | GitHub A developer at a manufacturer with more than 100,000 employees asked a coding agent to check a fix to an internal billing screen and show the result. The agent took the screenshots, created a public repository under the developer's personal GitHub account, and posted the images there for the reviewer. They showed billing records for a utility company. The repository sat outside the company's GitHub organization, so the security team never saw it. It was still public when researchers told the company (Glow Labs). That is one case from Glow's report, published on September 29 and covered by The Hacker News a day later. Glow counts more than