Least Privilege for AI Agents: Scope the Tools and the Tokens
An agent should get the narrowest tools and the shortest-lived tokens that let it do the one job in front of it. The same goes for data: only the slice that job needs. Most agent security incidents I've looked at came down to an agent holding an admin key it never needed, so an ordinary mistake turned into a data leak. Prompt injection makes the headlines, but sloppy scoping causes most of the damage I've seen. Convenience, and the pilot. The developer building the demo used their own token or a
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.