GitSpawn: Untrusted repos can execute code via AI coding agents

Researchers discovered that several AI coding agents execute git commands that can run arbitrary code from a repository's configuration without user approval, posing security risks when using untrusted repos. This vulnerability arises because git commands refresh their index using repository-specific settings like core.fsmonitor, which can specify executable commands.