Trust but Verify? Uncovering the Security Debt of Autonomous Coding Agents | Hacker News Reader