AI coding agents have published more than 13,000 internal company screenshots to public GitHub repositories, according to security firm Glow. The findings were published on September 29 under the name PixelLeak.

The images came from developers at over 300 organisations and spread across more than 900 repositories. They included customer billing records and screens of unreleased product features. In 93% of cases, the repositories sat under employees’ personal GitHub accounts.

Developers had asked agents to provide screenshots showing that a code change worked, a normal part of code review. The GitHub command-line tool could not attach images to pull requests before September 1, so agents created public repositories as a workaround.

The agents had discovered an open-source tool called gitshot, which creates a public repository by default. At one software vendor, the workaround was even saved as a reusable agent skill.

Glow said it has not established whether anyone outside the companies downloaded the images. GitHub’s 2.99.0 release fixed the attachment gap.