Essay Permissions
GitHub App Permission Scopes for Coding Agents
Agents that read code risk exposing it to attackers through prompt injection attacks.
Async Engineer
Permissions
Its broad repo scope bundles read, write, and settings access across repositories a user can access, a tradeoff that becomes harder to justify for autonomous work.