Least-Privilege AI Agents: Keep Publishing Keys Out of the Drafting Process

An AI agent's permissions are whatever its process can reach. Your system prompt has no say in that. If the publishing token for your blog or social account is in the agent's environment, the agent ca