How do people think about the sort of access and permissions it needs?

"Don't give it access to anything you wouldn't give a new contractor on day one."

https://x.com/rahulsood/status/2015397582105969106

Prompt injection is quite dangerous here...