The flaws show how agentic workflows can turn trusted repository signals into privilege-escalation paths that conventional ...