AI Agents Are Leaking Your Secrets and No One Has a Fix Yet

You gave your coding agent access to .env so it could spin up a database connection. Reasonable. That same agent can now read every API…