What’s described here isn’t connected to the agentic/AI nature of the software at all. Every single program you run as a regular user could potentially do this.

And I run most of them inside sandbox now.

Why would you let a markdown linter access your ssh keys?