Your coding agent runs as you. So does everything you install into it.

Your coding agent runs as you. Not as a service account with a carefully scoped role, not in a sandbox somebody signed off on. As you, with your filesystem, you