scenario · 9 MIN
Give it the least access it needs
Limit what an agent can do to the minimum the task requires.
HOOK
An agent that cannot delete cannot delete by mistake.
Checking your account…
SOURCES
- LLM06:2025 Excessive Agency — OWASP Gen AI Security Project