GitSpawn: Untrusted repos can execute code via AI coding agents

Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.