Unexpected Code Execution: When Your Agent Becomes a Shell (ASI05)

This is post #5 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series. I wrote about the trust gap with coding assistants in Your Coding Assistant Is Not You . But when agents can both generate AND execute code without you in the loop, the stakes are even higher. You ask your coding agent to fix a failing unit test. It generates a patch, installs a dependency, runs the test…