I believe many of these agents will not operate on files included in a gitignored file, which helps with sensitive assets like .env files. Definitely worth confirming. Either way, don’t open such a file and ask the agent questions about it. It’ll likely process it either way.
gemini CLI won't, but will if you ask it to.. so what are the guaranteed one of it's internal thinking steps doesn't do the same?