# Check instruction files before starting a coding agent

> Review downloaded instructions and agent endpoints before they can steer a coding session.

Source: https://fullbytedeveloper.com/blog/coding-agent-downloads-folder-check
Keyword: FOLDER
Published: 2026-11-05

Forever Security reported finding malicious agent instructions in a customer's Downloads folder. The report describes attempts to redirect an agent's configuration and install malware [1].

## Choose a project directory you control

The researchers recommend avoiding `~/Downloads` as an agent's starting directory. Inspect unfamiliar `AGENTS.md` and `CLAUDE.md` files before opening their folder with an agent [1].

```text
AGENTS.md
CLAUDE.md
```

Read for unexpected installation requests, credential handling or instructions to disable safeguards.

## Review configured endpoints

The report names these configuration locations [1].

```text
~/.codex/config.toml
.claude/settings.json
```

Check Codex for unfamiliar MCP server entries or a changed `chatgpt_base_url`. Check Claude Code for an unexpected `ANTHROPIC_BASE_URL` or proxy. Keep approvals and sandboxing enabled [1].

## Respond to evidence of compromise

Forever recommends rotating exposed tokens if you discover the malicious configuration. It identifies `function-color` as a malicious npm package in the campaign; finding it warrants treating the machine as compromised [1]. Do not run unfamiliar package commands to investigate them.

You have the instruction files and endpoint settings to review before the next agent session. For repository startup hooks, continue with [the unfamiliar repository checklist](/blog/unfamiliar-repository-startup-files).

## Sources

1. [Forever Security: instructions planted in Downloads](https://forever.security/blog/hijacking-ai-agents-via-downloads-folder/)

## Original posts

- [Instagram reel](https://www.instagram.com/reel/De_-F99lQt_/)
- [TikTok video](https://www.tiktok.com/@fullbytedeveloper/video/7701338365370731828)
- [YouTube Short](https://www.youtube.com/shorts/hPlRwy6_Tow)
- [Facebook reel](https://www.facebook.com/reel/2103564053698850)
- [Threads post](https://www.threads.com/@fullbytedeveloper/post/De_9__SCIrq)