---
title: "Discussion on \"My coding agents run with zero secrets (and they don't even know)\" | Hashnode"
description: "Discussion on \"My coding agents run with zero secrets (and they don't even know)\". I run Claude Code and Codex in yolo mode. --dangerously-skip-permissions, the whole thing. Which is great until you remember prompt injection is real and one cursed README could make the agent go env"
url: "https://hashnode.com/posts/my-coding-agents-run-with-zero-secrets-and-they-don-t-even-know/6a48faa089ff9dea5d81d6e9"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [My coding agents run with zero secrets (and they don't even know)](https://yago.blog/my-coding-agents-run-with-zero-secrets-and-they-don-t-even-know?utm_source=hashnode&utm_medium=feed)

I run Claude Code and Codex in yolo mode. --dangerously-skip-permissions, the whole thing. Which is great until you remember prompt injection is real and one cursed README could make the agent go env

Jul 4 · 2 min read · yago.blog  
Read the article

## Written by

[Yago](https://hashnode.com/@yagop)

@yagop

  
[View profile](https://hashnode.com/@yagop)

Software Engineer 🤓 Climber 🧗 Crypto 💱 AI 🤖

## Responses 1

Markdown supported · ⌘↵ to post

[Sarah Pan](https://hashnode.com/@sarahpan)

[Jul 6](https://hashnode.com/posts/my-coding-agents-run-with-zero-secrets-and-they-don-t-even-know/6a48faa089ff9dea5d81d6e9/comment/6a4b4ed749ed12e53e2ac0da)

So smart..