AI coding agent security guides

How Claude Code permissions work, what 85.6% of public configs get wrong, and a safe .claude/settings.json you can copy.

How Codex CLI approval and sandbox settings work, why 12.9% of public configs that set them use full bypass, and a safe config.toml.

7.8% of public Cursor .cursor/mcp.json files contain a credential-looking value. How to keep keys out of mcp.json, with a safe example.

42.4% of public Gemini CLI configs that set permissions turn on YOLO/auto-accept. What the settings do and a safe .gemini/settings.json.