TSCCscattered-teal
https://github.com/0xferrous/agent-stuff
https://github.com/0xferrous/agent-stuff/blob/main/extensions/block-sensitive-files.ts this is very simple but the agent can always use the bash tool to read the file in some way or other, is there a more full proof method to prevent yourself from leaking secrets to the hosted ai providers?
