(a) it's not that GitLab just launched

(b) it's an allowlist rule, not rocket science

(c) where's all this mythical "agent gonna do all the things for me" world?

Whitelisting these hosts mean they become extraction vectors for prompt manipulation. In fact it’s mentioned in the grant parent’s article at the end. So yes, it takes a while to do this right.

> (c) where's all this mythical "agent gonna do all the things for me" world?

If you're in a hurry: via mcp servers.

If you're not in a hurry, more and more of these kind of capabilities will end up getting integrated directly.