Your Coding Agent Reads .env Without Asking. The Permission Prompt Guards the Wrong Door
A Cursor agent found a Railway token in an unrelated file and deleted a volume in 9 seconds. Approval prompts gate actions. The read already got the key.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.