Analysis · Retrospective 2025
An issue comment should not choose an agent’s permissions
A GitHub MCP demonstration shows how untrusted issue text can be promoted into unintended tool use.
Subject
Emerging Technology
New risks from artificial intelligence and other technologies: synthetic media, automated fraud and attacks on AI systems themselves.