Your coding agent runs as you. So does everything you install into it.

Description and use

<p>Your coding agent runs as you. Not as a service account with a carefully scoped role, not in a sandbox somebody signed off on. As you, with your filesystem, your credentials, your repository and your ability to push code.</p> <p>That is the whole reason it is useful, and it is the reason the things you install into it deserve more scrutiny than they usually get. An agent skill, a plugin or an MCP server is not a document your agent reads. It is a set of instructions your agent follows, with your permissions, while you are doing something else.</p> <p>Most people's mental model for this is t

Problem

<p>Your coding agent runs as you. Not as a service account with a carefully scoped role, not in a sandbox somebody signed off on. As you, with your filesystem, your credentials, your repository and your ability to push code.</p> <p>That is the whole reason it is useful, and it is the reason the things you install into it deserve more scrutiny than they usually get. An agent skill, a plugin or an MCP server is not a document your agent reads. It is a set of instructions your agent follows, with your permissions, while you are doing something else.</p> <p>Most people's mental model for this is t

Outcome

<p>Your coding agent runs as you. Not as a service account with a carefully scoped role, not in a sandbox somebody signed off on. As you, with your filesystem, your credentials, your repository and your ability to push code.</p> <p>That is the whole reason it is useful, and it is the reason the things you install into it deserve more scrutiny than they usually get. An agent skill, a plugin or an MCP server is not a document your agent reads. It is a set of instructions your agent follows, with your permissions, while you are doing something else.</p> <p>Most people's mental model for this is t

Evidence

Your coding agent runs as you. So does everything you install into it.

Source