FAQ
Agent sandboxing limits what untrusted generated code can read, change, contact, and consume.
Read Agents with real credentials
Read Put a lock on it: securing a self-hosted stack