Comment by Stromgren

The things you allow the LLM to read will obviously be sent as part of a prompt. You can control that though. Reads are tool calls and you can configure permissions for that or be asked every time the agent wants to read something.

This is straight up just uploading your whole working directory. Not as a LLM prompt, but to a Google Storage.