Modern day code agents would clone a repo and read the code when you ask it a question about an API that’s not clearly documented. This vulnerability is real.

This is exactly why every AI agent should run in a sandbox.