GitHub AI agent leaks private ... Note