Page 6 of 13

Agent and tool security

Least privilege, the confused deputy, sandboxing and scoped credentials — with a lab where an agent with shell and email tools leaks data until a permission layer blocks the chain.

40 min read · October 9, 2026