Please do not open a public issue for vulnerabilities.
Report them privately with GitHub Security Advisories on this repository. Include the MonoCode version you’re running and enough detail to reproduce.
MonoCode runs the agent CLIs you already have installed. A session can edit files and run commands the same way those tools would in a terminal. Treat a bad prompt like running those CLIs yourself.