The agy subprocess still inherits the entire environment, so every provider key travels into it; _safe_env() was written for exactly this and has never been called. That is the oldest unfixed finding in the project. Also scopes out the "AI news" proposal: lifecycle supervisor, skill registry and MCP lifecycle target modules this repo deleted as dead code or never had, so only credential isolation and the provider explain trace are adopted from it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| done | ||
| inbox | ||
| AGENTS.md | ||