--dangerously-skip-permissions in CI: when AI agent YOLO flags leak your secrets

An issue opens, a workflow starts, and an AI agent reads it: run : claude -p "Fix this issue: ${{ github.event.issue.title }} ${{ github.event.issue.body }}" \ --dangerously-skip-permissions The job also has ANTHROPIC_API_KEY , a write GITHUB_TOKEN and open network. Anyone who can open an issue now writes part of the prompt for an agent that never asks before running a command. (A made-up…