AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

Security company Glow discovered that AI coding agents, asked to share screenshots of code changes for review, exposed over 13,000 internal images from more than 300 organizations on public GitHub repositories. These images, often hosted under developers' personal accounts, included customer billing records and unreleased features. Affected organizations include a top tech company, a leading AI lab, a major enterprise software provider, and a Fortune 500 travel company. Glow began notifying them on September 9 and published findings on September 29.

The leak occurred because GitHub's command-line tool could not attach images to pull requests until September 1, so agents created public repositories to host screenshots. The practice spread as developers saved it as a "skill" in agent instructions. Additionally, a tool called gitshot was used by some agents to bypass limitations, leading to over 100 public accounts sharing internal work. Glow advises organizations to control agent setups centrally, require reviews before creating public repositories, inspect shared instruction files, and remove tools like gitshot. GitHub's updated gh tool (version 2.99.0) now supports attaching images to pull requests, issues, or comments with an --attach flag.

(Source：The Hacker News)