Harnesses like Claude Code and Codex have extensive access to the machine you’re running them on and secrets stored there. The risk compounds when you use MCPs or API credentials to have the agent perform tasks on a schedule. If anyone gains access to your account, they can gain access to a hug...
Source: [Hacker News](https://news.ycombinator.com/item?id=50181801)