I have been using opencode (and other agent harnesses) on my local ubuntu machine. I usually give permission "always allow" once it asks for things like "ls" and "cat". Recently after doing this it went and read some personal documents and most definitely sent that over the internet to the model provider. This is the […]