On a GitHub project, agents must just be considered untrusted external contributors.