Plugin4Shell: A Pinned AI Agent Plugin Was Not Necessarily the Code That Ran
Plugin4Shell bypassed commit pinning in four major coding agents. The immediate task is patching; the lasting lesson is to verify resolved artifacts and constrain agent runtimes.
K
Kyluke McDougall