so what happens if you are running an agent locally and it helpfully tries to write a script that prints the environment variables, for debugging purposes?

You run your agent in a container and you only give it access to agent-specific secrets that can be rotated easily.