Hacker News Reader

You know I'd love an ability to a "lock" a file from being read by agents.

Casual browsing of a .env is probably my top pet peeve of coding agents.

Everytime a secret gets slurped into an API I have to go roll secrets.

Does this tool solve that use case?

Yes, you can define sensitive paths and assign 'ask' or 'block' policies to them.

.env, .ssh, and others are treated as a sensitive filenames by default.

Similarly, with hosts and network access - unknown hosts pause, trusted hosts can be configured.