Glow Labs discloses PixelLeak: coding agents published 13,000 internal screenshots to public GitHub repositories

Glow Labs' PixelLeak research found that more than 13,000 internal development screenshots were publicly posted to GitHub by coding agents, involving more than 300 organizations and more than 900 code repositories, including a frontier AI lab, a large enterprise software vendor, and a Fortune 500 travel company. The reason is that GitHub's image hosting service only supports browser operations, while coding agents use a text CLI and cannot attach screenshots to PRs in private repositories, so they instead commit images to public repositories under personal accounts. About one-third of affected organizations used the open-source tool gitshot, whose published images are concentrated under the _gitshot tag and can be downloaded by anyone. In 93% of cases, the images were in repositories created under employees' personal accounts, so corporate security teams failed to detect them. Glow Labs has been contacting affected organizations since September 9, 2026, and recommends auditing departed employees' accounts, checking releases and gists, restricting agent auto-approval, and configuring runtime blocking.