From Dev.to
Your AI Agent Is an Attacker's New API: Prompt Injection, Tool Hijacking, and Securing Local Coding Agents
Originally published on tamiz.pro. Every AI coding agent you run locally — Cursor, Copilot, Aider, Claude Code, or a custom harness built on an LLM API — is effectively a remote API you didn't deploy....