Last week I got a chill down my spine
Last week I let a tool auto-reply to client emails for me. It went ahead and replied to three on its own. Luckily it was just fluff, but in that moment I realized: AI Agents aren't chatbots — they actually "do things."
So what is it exactly? And why a security CEO is freaking out
A regular AI just answers questions. An Agent clicks buttons, sends emails, transfers money, deletes files — all on its own. Manus, AutoGPT, and Claude's Computer Use all fall into this category. Recently a security company CEO publicly said: once AI can act on our behalf, the attack surface becomes "near infinite."
I'm not trying to scare you. I use these tools to boost my own productivity too. But let's get clear on one thing: when you let AI do work for you, what keys to your accounts is it actually holding? The easiest trap for a small team: you click "Allow All" when granting permissions, then forget about it.
What you can do in 10 minutes today
Cost: $0
Time: 10 minutes
Technical barrier: zero. Just answer three questions — ① Can it access my cloud drive, email, or payment accounts? ② Have I set up a permission whitelist? ③ If it screws up, can I undo it?
First step: open your most recent AI tool's account settings, find the "Authorized Apps" or "Connected Apps" button, and revoke any permissions you don't actively use.
Three types of people, three pieces of advice
Just starting out: You probably aren't using Agents yet. Here's a rule of thumb: let AI help you "think" (draft copy, brainstorm ideas) with confidence, but pause before letting it "act." No rush.
Got 1-2 clients: Go audit your permissions list today. I personally found three extra permissions my tool had grabbed at this very step. Annoying, but better than something going sideways.
Scaling up: When picking tools, ask one extra question — "does it have action logs?" A tool that can tell you "what the AI did, when, on what date" at least lets you investigate when things break. Not everyone needs this, but once your client list grows, you'll want it.