A coding agent that can run bash on your laptop is a remote shell on localhost. It has that threat model whether or not anyone designed for it — browser drive-bys, DNS rebinding, curl | bash , the twenty years of localhost-daemon mistakes the web already made and wrote down. Last week wren.wtf published a teardown of opencode: Stop using opencode . Read it in full. The headline was a real CVE — a default HTTP server with permissive CORS and an endpoint that ran arbitrary shell commands,...