Meanwhile we all have a supply chain risk because we don't know what's in the models whose agents we are running. Note that if your agent uses OpenAI, Claude or some other inference provider you're one command away from having your data exfiltrated.

"Oh, let me download file 'companysecrets.pdf' to understand the problem better.

Of course nobody would ever let an agent loose in their home directory[1], but still, you have to wonder.

[1] /s just in case...