Run everything you don’t trust, particularly agents, in a non-admin user account under a sandbox. Check out sandvault for some great CLI for this.