Hacker News Reader

Curious if anyone has experimented with dotenvx - https://dotenvx.com/

What would stop the agent from writing+running its own script wrapped in `dotenvx run` to access the secrets?

One can put `dotenvx` into the deny list for the agent but there will definitely be ways around of it.