When an AI Agent possesses file read/write, Shell execution, and network access capabilities, who guarantees it won't do harm?

The severity of this problem should not be underestimated. In traditional architectures, AI tools run directly on the host machine with the same system permissions as the user. This means:

A prompt injection could lead to malicious file modifications

A wrong Shell command could delete important data

A hijacked network request could leak sensitive information