A Folder Shouldn't Be Able to Run Code Just Because I Opened It

Automated excerpt

You could open a project folder, your coding tool would run Git to understand the repository, Git would read some configuration, and suddenly someone else's code could be running on your machine. Coding agents routinely run commands such as git status or git diff in the background to understand a repository, and those operations can cause Git to invoke the configured helper. I think most of us still have an old mental model of a repository.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.