Unverified50% confidenceOpinionExact time
Custom tools bring permission and security boundary issues: the cost of an agent that can run commands and modify files going wrong is far higher than that of an assistant that can only chat.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAgent的安全性问题比对话更复杂，Skills设计需内置权限控制（最小权限原则）、执行沙箱和人机协作审批机制77% similarVerifiedThe autonomous decision-making of agents may produce unpredictable side effects such as accidental code deletion and erroneous deployments, requiring well-developed permission boundaries and behavioral audit mechanisms.75% similarUnverifiedTool calls introduce the Confused Deputy problem: the agent holds legitimate credentials and, once induced, will use its own credentials to perform unauthorized operations on behalf of the attacker.73% similarUnverifiedFeatures involving role switching, cross-organization access, and token passing are high-incidence zones for logic vulnerabilities; such problems are difficult for automated tools to discover, have a high severity level, and correspondingly pay higher bounties.72% similarUnverifiedWhen using Agent-type tools, one should not mount a large number of unrelated skills at once, as they will interfere with each other and cause chaotic results72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1092983API
curl https://kongchang.com/api/v1/knowledge/claims/1092983MCP
get_claim(id=1092983)