> isn't this thing one bad prompt injection away from exposing your network / hosting a worm / worse?

I gave grok access to one of the projects I’ve been coding for a while using variety of agents (mostly gemini tho). It immediately flagged bunch of security issues, including exposed .env file.