Agentic AI Security The New .env: Measuring Credential Leakage in AI Agent Instruction Files Developers have quietly opened a new place to hard-code their own live secrets: the Markdown files they write to steer their AI coding agents. We measured how often, which files, and why. Zvika Babo & Gabi Nakibly |August 05, 2026