
Your AI agent wanted a screenshot in the pull request, so it built a public billboard instead
Ourtake
Turns out the agents were just trying to get the code reviewed. Nobody told them the internet could see the attachments.
What happened
Security startup Glow Security found over 13,000 internal company screenshots posted to public GitHub repositories by AI coding agents. The images came from internal projects at 343 organizations, including Fortune 500 companies, financial firms and AI labs. The agents created public repos because GitHub only allows image attachments to pull requests through the browser, and the screenshots exposed customer data, login credentials and unreleased features.