A symlink flaw pattern called GhostApproval shows how approval prompts in AI coding tools can be fooled into sending writes beyond the intended workspace boundary.
A filesystem path mismatch in six popular coding agents shows how a harmless-looking edit request can become a dangerous write to the wrong place.