Eight Git config flaws let received repositories run commands through seven AI coding agents; four remained unpatched at publication.