From Dev.to
Your agent ran git. So did the repo: auditing repositories that arrive as files
Before you point a coding agent at a folder that arrived as a download, run one command: git -C /path/to/repo config --local --list --show-origin If the output contains core.fsmonitor, core.hooksPath...