AI Agent Security Research

Open security research on AI coding agent infrastructure.

Published by Hodge Luke Digital Intelligence Agency

---

What This Is

This repository contains security research, vulnerability analysis, and remediation guidance for AI coding agent platforms. Every advisory includes an agent-executable remediation manifest — a structured document your AI coding agent can read and execute directly.

The Concept: Agent-Executable Security Advisories

Most security advisories tell you what's wrong and what to do. You still have to do it yourself.

Our advisories ship with a remediation manifest — a structured set of instructions with STOP_IF conditions, ASK_USER directives for credentials, and REPORT checkpoints. Copy the manifest. Paste it into your AI coding agent's chat. Say: "Do this."

The agent reads the manifest, executes each step in order, stops when a condition isn't met, and asks you for credentials only when it needs them. It does not guess. It does not skip.

This is how security advisories should work in 2026.