Unverified50% confidenceDecision RuleExact time
Read operations by Agents can be left open, but every write path must be bound to a real user's permission verification.
1
Sources
50%
Confidence
Long-term
Relevance
9/24/2026
First Seen
Sources
Related Entities
Related Claims
Unverified在Agent代替用户操作敏感账户场景下，仅需读取数据的Agent其令牌Scope应被限定为只读权限74% similarUnverifiedWhen an Agent processes untrusted external inputs, the input content must be filtered, secondary confirmation must be set for critical operations, and the scope of accessible data and the types of callable operations must be strictly limited.70% similarUnverifiedAny user-controlled input must be strictly validated at trust boundaries, especially on critical paths involving authentication and access control.70% similarUnverified中转平台在技术层面对所有对话内容拥有完整的读取权限，用户无法通过地址栏的锁标识判断数据是否真正私密66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/948304API
curl https://kongchang.com/api/v1/knowledge/claims/948304MCP
get_claim(id=948304)