hol-guardguard-extensionscredential-exfiltration
Your agent tried to ship your AWS keys
When an agent posts cloud keys with curl, Guard's command.data-protection Extension pauses it. Inbox shows Allow just this once or Keep blocked. Rehearse with hol-guard command test on a dummy path.
