I've been using AI coding agents (Claude Code, Cursor, Codex, aider ) to work with open source repos, and I noticed a scary gap:
You git clone a project, you point an agent at it, and before you type a single command, code can already run.
A .git/hooks/pre commit, an npm postinstall, a .envrc, a VS Code task set to folderOpen, a CLAUDE.md that tells the agent to curl | bash none of these show up in a normal diff review.
