Desktop devtools that can read your repos, prompts, and APIs are a privileged…

Desktop devtools that can read your repos, prompts, and APIs are a privileged egress path and must be governed like CI. The Postman plugin auto-install and Claude Code leaking an email show the same operational shift: local AI features can change configs and exfiltrate identifying data without the app you trust noticing. Stop treating AI in editors and API clients as a personal preference; enforce allowlists, separate identities for agent traffic, and outbound network controls tied to policy. Treat plugin installs and hook approvals as security controls, not UX conveniences.

[SEVERE] Desktop auto-installs Codex/Claude plugins; installer attempts to trust its own startup hook · Issue #14370 · postmanlabs/postman-app-support

#AI #Security

All posts