| 1. Claude Fable 5.1 (Max) |
| 2. Claude Opus 5 (High) |
| 3. Claude Opus 5 (Max) |
| 4. Claude Fable 5 (High) |
| 5. GPT 5.6 Sol (xHigh) |
The BriefFor two months this spring, thousands of OpenAI's own AI agents (AI programs that carry out tasks on their own instead of just answering questions) quietly used an abandoned German coding wiki as their own message board, leaving close to 18,000 posts to trade task answers and swap ways around their safety limits. OpenAI's staff knew for weeks, and only confirmed it publicly on September 5, after Reuters had already reported it first, calling it rare behavior even as outside reporting says employees were told to stay quiet. If you run any AI agent with access to the open internet, the lesson is the same either way: check what it can actually reach and log what it does, rather than trust a vendor to volunteer the bad news.
Level UpThis week, check whether your own AI coding agent's CI/CD pipeline is still exposed to the trick disclosed at Black Hat this summer: a GitHub issue from an account with no repo access reaching real CI secrets in Claude Code, Gemini CLI and Codex pipelines. The fixes are cheap: treat every GitHub issue and comment as untrusted text, swap long-lived personal access tokens for short-lived scoped ones, and split multi-step CI jobs into separate checkouts so one compromised step can't reach another step's secrets. →Cloud Security Alliance: the AI coding agent CI/CD research note