[m-hodges]

What would stop the agent from writing+running its own script wrapped in `dotenvx run` to access the secrets?

[whinvik]

One can put `dotenvx` into the deny list for the agent but there will definitely be ways around of it.