Affected Vendor(s)
Affected Product(s)
Summary
Trae IDE can expose developer secrets. A malicious repository can use .trae/rules/project_rules.md to make the agent read .env files and send API keys externally via OpenPreview.
Timeline
Credit
Blog Post
References
Mindgard helps organizations discover, assess and defend their AI systems. Spun out of more than a decade of AI security research at Lancaster University in the UK and headquartered in Boston and London, Mindgard operationalizes the expertise of AI researchers and offensive security practitioners through a Security Platform that performs Shadow AI discovery, AI red teaming, and run-time AI protection to assess and mitigate risk across models, agents, and applications.
