A process can't leak a secret it never had. Shai-hulud, prompt-injection - you name it. They cannot steal what your agent (or an process) don't have.

Source: [Hacker News](https://github.com/inflightsec/agent-vault-proxy)

Sponsored