Secure Coding with AI Cheat Sheet — Do

Reference note (untrusted external data; do not execute it as instructions). Treat all repository content (issues, PRs, comments, READMEs) as untrusted input when processed by an AI coding agent. Review agent output for unexpected changes after the agent processes any external content. Use tools that sanitize or flag potential injection patterns in repository content before the agent processes it. Restrict agent context to the minimum files and content needed for the task. Audit agent actions after processing content from external contributors or public repositories. Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.