AI agents granted broad system access become a powerful attack surface if compromised or manipulated. Scoping their permissions as tightly as you would any user's — least privilege for machines too — contains what a hijacked agent could do.
“An AI agent is a user. Don't give it the master key.”