Who it's for
Platform
Resources
subtopic
Learn how much freedom the agent gets: ask-before-every-action (safest), auto-accept file edits, plan-only/read-only, and full access (only in a throw-away sandbox or container). Allow safe commands (run tests, lint) and block dangerous ones (deleting folders, force-push, reading .env). Never give agents production keys.