Yeah, if you don't care if your ssh keys or data are potentially posted all over the internet, more power to you...
replyNot to mention cases like some comment here:
"I've caught Fable discovering the ip to a production server in documentation and attempting to connect there on its own to run commands without explicitly being prompted to. It didn't work because I was watching it live and and also the key was password protected, but yeah, I do see some danger."
How are ssh keys going to be leaked, the agent never needs to read them.
replyThe agent decides what it "needs" to read - not the intention behind the prompt you gave it.
replyA failed SSH connection to a staging server for example, can trivially make it look into .ssh to try to diagnose it. And many other ways, including prompt injection.
https://www.reddit.com/r/ClaudeAI/comments/1q7dszm/claude_al...
https://github.com/anthropics/claude-code/issues/31566