https://x7peeps.com/tags/%E6%9D%83%E9%99%90%E6%B2%BB%E7%90%86/index.htmlHugozh-CNWed, 16 Sep 2026 23:50:00 +0800https://x7peeps.com/AI/08-%E5%AE%89%E5%85%A8%E4%B8%8EAI%E8%9E%8D%E5%90%88/AI-CLI-%E7%BC%96%E7%A0%81%E5%B7%A5%E5%85%B7%E5%AE%89%E5%85%A8%E4%BF%AE%E5%A4%8D%E6%BD%AE%E5%A4%8D%E7%9B%98%E4%B8%83%E6%AC%BE%E5%B7%A5%E5%85%B7%E6%9A%B4%E9%9C%B2%E7%9A%84%E4%BA%94%E7%B1%BB%E9%98%B2%E5%AE%88%E7%9B%B2%E5%8C%BA/index.htmlWed, 16 Sep 2026 23:50:00 +0800https://x7peeps.com/AI/08-%E5%AE%89%E5%85%A8%E4%B8%8EAI%E8%9E%8D%E5%90%88/AI-CLI-%E7%BC%96%E7%A0%81%E5%B7%A5%E5%85%B7%E5%AE%89%E5%85%A8%E4%BF%AE%E5%A4%8D%E6%BD%AE%E5%A4%8D%E7%9B%98%E4%B8%83%E6%AC%BE%E5%B7%A5%E5%85%B7%E6%9A%B4%E9%9C%B2%E7%9A%84%E4%BA%94%E7%B1%BB%E9%98%B2%E5%AE%88%E7%9B%B2%E5%8C%BA/index.htmlAI CLI 编码工具安全修复潮复盘：七款工具暴露的五类防守盲区 AI CLI 编码工具（Claude Code、OpenAI Codex、Gemini CLI、GitHub Copilot CLI、Kimi Code CLI、OpenCode、Qwen Code）已经大规模进入开发者的日常工作流。这些工具运行在开发机上，手里握着 shell 执行权、仓库读写权、凭据访问权和日益增多的 MCP 连接器——从防守者视角看，它们不再是"编辑器插件"，而是一组半自主的特权进程。