The project FAQ is honest about this: “Running an AI agent with shell access on your machine is... spicy. There is no ‘perfectly secure’ setup.” They’re right. But there’s a massive gap between “perfectly secure” and “leaking credentials on Shodan.” This checklist closes that gap.