Downloads-folder instruction files steer Codex and Claude Code
In Forever Security tests, Codex followed the planted file in more than 90% of attempts and Claude exposed a login token about half the time.
1
Stories per day · 30 days
7 stories, newest first · one card per story
Stories tagged #agents-md
Malicious AGENTS.md files in Downloads hijack Codex and Claude Code
A customer agent tried to install npm package function-color; tests also stole Claude Code OAuth tokens in about half of runs.
2
[AINews] Here are 6 Clones of Jev in 2 days
Jev's non-generative decision model launch drew 36M views and six open clones in two days, positioning discriminative models as fast complements to LLMs.
6
Claude Code now reads AGENTS.md if there is no Claude.md
Anthropic's Claude Code 2.1.277 adds AGENTS.md support as fallback project instructions when no CLAUDE.md exists, plus gateway proxy options and many bug fixes.
Quoting Thariq Shihipar
Anthropic's Claude Code 2.1.277 now reads AGENTS.md project instruction files when no CLAUDE.md is present, built on its new mods system.
Anthropic finally adds AGENTS.md support to Claude Code
Anthropic added AGENTS.md support to its Claude Code CLI, letting developers feed repository-specific instructions to the coding agent.
GPT-6 Astra needs leaner prompts and fewer guardrails, OpenAI recommends
OpenAI's Eric Provencher advises developers using GPT-6 Astra to shorten skill descriptions, trim AGENTS.md reading requirements, relax approval rules, and define clear completion goals.
4