A read-only subagent can still run rm -rf. Test AI agent permissions by trying out-of-scope actions on every route, checking the effect, and enforcing scope.
Need help?
Contact usA read-only subagent can still run rm -rf. Test AI agent permissions by trying out-of-scope actions on every route, checking the effect, and enforcing scope.