Unverified50% confidenceDecision RuleExact time
AI Agent不应有全局文件系统访问权限，只能操作特定目录和文件类型，危险操作应被拦截或需要审批
1
Sources
50%
Confidence
Long-term
Relevance
7/23/2026
First Seen
Sources
Harness工程：为什么模型强也没用，关键在这里
Related Claims
UnverifiedAI Agents should default to read-only mode, and high-risk actions such as write operations, delete operations, and network requests require explicit authorization.81% similarUnverifiedWhen using AI Agents, the principle of least privilege should be followed, avoiding granting sensitive permissions such as email, files, and servers from the outset, to guard against risks such as prompt injection attacks.80% similarUnverifiedAI Agent无法将PRD文档写入磁盘的根本原因是工具权限配置中缺少写入权限，而非提示词不够清晰77% similarUnverifiedIn Agent mode, AI may perform dozens of file operations in a single task, making it impossible for humans to review each one individually.76% similarUnverifiedWhen an AI Agent is granted full file operation permissions, attackers can carry out prompt injection attacks by hiding malicious instructions within file content.76% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/596178API
curl https://kongchang.com/api/v1/knowledge/claims/596178MCP
get_claim(id=596178)