Lesson 14: Security, Permissions and Untrusted Context (Parent Q&A)

This guide explains why AI coding agents need security controls when they can access files, run commands or use external tools. It covers least privilege, credential protection, approval boundaries and the difference between authorised instructions and untrusted context. It also explains direct and indirect prompt injection and how MCP scopes can limit access without guaranteeing that every tool or result is safe.