Scope your requests
- Good tasks
- Tasks needing extra care
- Analyze this dataset and identify trends
- Draft a reply to this customer inquiry
- Review this document for clarity and errors
- Summarize the key points from this meeting
Think before executing
The main everyday risk isnât a security flaw â itâs an agent doing something you didnât mean to authorize.Actions that are hard to undo
Actions that are hard to undo
- Sending emails or messages to customers
- Deleting files, records or accounts
- Deploying or changing production configuration
- Overwriting a shared document
Actions you can safely let an agent do
Actions you can safely let an agent do
- Drafting content for you to review
- Analyzing data and summarizing findings
- Searching and retrieving information
- Generating documentation or test data
Reduce risk for sensitive agents
Turn off actions the agent doesn't need
Turn off actions the agent doesn't need
In the agent builder, only enable the connector actions the task requires â for example, keep âdraft emailâ but leave out âsend emailâ. See tool restriction.
Test with real data carefully
Test with real data carefully
Try a new agent on a small, low-stakes case before relying on it for something important. Use anonymized or test data when you can.
Break large tasks into steps
Break large tasks into steps
For multi-step work, review the result of each step before moving to the next, rather than asking for everything at once.
Review connector access
Review connector access
Before connecting an agent to a tool, check what that connector can see and do. Remember it acts with your own permissions in that tool.
Common-sense guidelines
Review before it has impact
Review before it has impact
Treat AI output like a colleagueâs draft: check it before it reaches customers or production systems.
Keep using version control
Keep using version control
For code, commit AI-assisted changes separately so you can track and revert them if needed.
Don't ask for illegal or harmful content
Don't ask for illegal or harmful content
This is about professional ethics and your organizationâs reputation, not a platform limitation.
Verify what matters
Verify what matters
For important decisions, check AI-generated information against authoritative sources. Use AI to speed up research and drafting, not to replace judgment.
Quick reference
For higher-risk tasks: restrict the agentâs tools, share narrowly first, and review output before anything ships.
The bottom line
- Think before executing â review before sending, deleting or deploying.
- Scope requests clearly â specific tasks are easier to check.
- Use good judgment â verify what matters, and treat AI as a fast collaborator, not a replacement for it.