Secret leaks
Credentials and .env files ending up where they should not.
Agent reads your .env file into its context
Coding agents can read secrets files like any other file unless you deny it. Claude Code documents a Read deny rule for exactly this.