Gemini CLI and Claude Code flaws let untrusted GitHub input reach CI workflows, including host command execution and API key ...