The lethal trifecta is already in your CI pipeline

This work is critically important as more and more companies move into having agents handle triage of inbound issues, bugs, vulnerabilities, etc. If it can happen to Google, chances are, there's landmines waiting in your CI pipeline as well.

The ability to communicate outbound, parse content from untrusted sources and access internal data is called the lethal trifecta for a reason. Anytime that combination exists, you are at real risk of leaking data.