Hey yall, First off, i wanna thank you all so much for the support and feedback on my post yesterday about agentlint (the security scanner for MCP server configs). I'm 15, working on this during my break, and seeing people actually validate the project geniunely meant everything to me. In the comments on my last post, a commenter pointed out a massive, underserved security loophole: while I was checking env blocks for hardcoded secrets, I completely missed secrets leaking into CLI arguments ...