An AI agent can pass every safety check and still leak secrets

A pull request lands with a tidy bug report in the description. A bot reads it before any person does, pulls a few shell commands out of it, gets them approv...