You can check the scripts and cronjobs, als ask it to summarize the scripts actions (using another agent/model if you want). All in all, LLMs are not 100% trustworthy but generally things go as intended.

“Generally” I am not anti ai in any way but I do worry people will end up in trouble by giving things like ai agents too much fredom