Thanks for making this blog post, very informative!

I've found as well that while you can run agents with a lot of tools and set them free autonomously they tend not to be prompted correctly by default to not get enormously stuck and do really dumb things along the way.

Never open pandoras box without understanding the implications and principle of least privilege and trust apply at every layer of the equation now