---
title: "Discussion on \"What DVAA Teaches About AI Agent Permissions\" | Hashnode"
description: "Discussion on \"What DVAA Teaches About AI Agent Permissions\". Okay, this repo is fun.\nI’ve been exploring Damn Vulnerable AI Agent, or DVAA: an intentionally vulnerable platform for testing and learning about AI agent security.\nThink DVWA, but for AI agents.\nIns"
url: "https://hashnode.com/posts/what-dvaa-teaches-about-ai-agent-permissions/6a8450aa1ae57ca75a99f31c"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [What DVAA Teaches About AI Agent Permissions](https://akshaymore.hashnode.dev/what-dvaa-teaches-about-ai-agent-permissions?utm_source=hashnode&utm_medium=feed)

Okay, this repo is fun. I’ve been exploring Damn Vulnerable AI Agent, or DVAA: an intentionally vulnerable platform for testing and learning about AI agent security. Think DVWA, but for AI agents. Ins

Aug 18 · 3 min read · akshaymore.hashnode.dev  
Read the article

-   [#ai](https://hashnode.com/tag/ai)
-   [#ai-agents](https://hashnode.com/tag/ai-agents)
-   [#security](https://hashnode.com/tag/security)
-   [#ai-security](https://hashnode.com/tag/ai-security)
-   [#chaicode](https://hashnode.com/tag/chaicode)
-   [#chaiaurcode](https://hashnode.com/tag/chaiaurcode)
-   [#chaicohort](https://hashnode.com/tag/chaicohort)

## Written by

[Akshay More](https://hashnode.com/@akshaymore)

@akshaymore · Mumbai, IN

  
[View profile](https://hashnode.com/@akshaymore)

Sharing experiences in words

## Responses 1

Markdown supported · ⌘↵ to post

[Kartik N V J K](https://hashnode.com/@kartik-nvj)

[Aug 19](https://hashnode.com/posts/what-dvaa-teaches-about-ai-agent-permissions/6a8450aa1ae57ca75a99f31c/comment/6a85fd8471e234059a23e57f)

DVAA is a good teaching tool because permission scoping is where most agent security actually lives, and over-broad tool access is the vulnerability people notice last. The habit that helped me was treating every tool grant as something the agent has to earn per task, not a standing capability. Did working through DVAA change how you scope tool access by default?