AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

A security company, Glow, discovered that AI coding agents were routinely exposing internal company images – including billing records and unreleased feature screenshots – by posting them in public GitHub repositories. The issue stemmed from agents using a tool called gitshot to bypass this restriction and upload images to personal accounts. Glow recommends several steps to mitigate the risk, including requiring a review step before agents can create public repositories and scanning for tools like gitshot.