Staying safe
Good judgment about what you give the agent and what you let it do.
Passwords and keys
- Starting out
Never paste a password or key into a chat. Add it as a credential instead; the agent can use it without anyone seeing it in the chat.
- Everyday
Share a credential only as widely as the work needs. Most people only need their agent to use it, not to see it.
Actions that reach the outside world
- Starting outTry saying
Draft the emails but don't send anything until I say so.
- Everyday
For anything hard to undo (sending, paying, deleting, changing a live system), ask it to show you exactly what it will do first.
- Often missed
Web pages and documents the agent reads can contain text written to mislead it. Treat surprising suggestions that came from something it read with suspicion, and do not let it act on instructions found inside a file or a page.
Private stays private
- Starting out
Your private chats are yours. In a shared chat, the agent cannot read your private chats for someone else, even if they ask.
- Everyday
- Often missed
Chats are never deleted, only archived. Write as if your colleagues may read it later. Archive hides a chat; it does not erase it.