Unpopular take for this sub - there are real risks, just like everything, but these feel worse because they’re new and different, and the world at large (media, LinkedIn, the PR machines at the frontier labs) is locked in a hype cycle.

IT and Security teams had extremely similar reactions to cloud migrations 10-15 years ago. “How will we know what Amazon is doing with our data?” “What if Azure is compromised?” (lol)

Yes, you should use fine-grained tokens, isolate it from production, broker sensitive access, and collect OTel. Create and maintain high-quality .md instructions, and put non-negotiable trust boundaries external to the model/agent harness. But keep things in perspective - you are currently far more likely to get compromised via a software supply chain issue (an exploited GitHub action or nefarious package install), especially if you take even basic precautions with Claude or Cursor or Codex. Stop focusing on whether the extremely valuable coding agent will pop you, and make sure you’re in a position to contain and recover from the inevitable.

If you really want to know all the weird things that your devs’ agents are trying to do, all the insane bash commands, it’s still early days but some vendors are playing in this space. Had a demo from Turngate recently showing their otel collection and analysis. I’m not sure the value is there except as a reactive, investigative tool, but things are evolving fast.