Hacker News Reader

What would stop the agent from writing+running its own script wrapped in `dotenvx run` to access the secrets?

One can put `dotenvx` into the deny list for the agent but there will definitely be ways around of it.