Unverified60% confidenceFactTime unknown
VS Code requires users to explicitly authorize the Agent to execute system commands through a pop-up permission notification.
2
Sources
60%
Confidence
Long-term
Relevance
6/3/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedResponsibilities should be separated between the Agent (responsible for proposing, with no sending or credential modification) and the Executor (responsible for acting, only running proposals marked as approved and atomically checking status).73% similarUnverifiedIn multi-agent architectures, messages sent from one agent to another should be protected in the same way as user input, and each agent should only possess the permissions necessary to run its tools.72% similarUnverifiedIntent-based Authorization uses the purpose and context of the task to determine the permissions for each access.71% similarUnverifiedFor sensitive operations such as file handling, it is recommended to select manual approval permissions so that each step of the Agent's operation is visible.71% similarUnverifiedIn Agent systems, permissions should be independently verified for each tool call rather than relying on session-level authorization, combined with the principle of least privilege to revoke permissions immediately after an operation is complete.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/40421API
curl https://kongchang.com/api/v1/knowledge/claims/40421MCP
get_claim(id=40421)