My coding agents run with zero secrets (and they don't even know)

I run Claude Code and Codex in yolo mode. --dangerously-skip-permissions, the whole thing. Which is great until you remember prompt injection is real and one cursed README could make the agent go env