AI Agent Security (Course)
Trust Prompt
Also: folder trust dialog, startup trust dialog
The dialog an agent shows when opening a project, asking whether to trust the folder's configuration before running anything it defines.
In more detail
A trust prompt is only a control if nothing the folder configures can run, and no request carrying credentials can be sent, until the user answers. Two Claude Code vulnerabilities involved code or network requests occurring before that answer. A prompt that does not state what will run, or that is answered by reflex, gives less protection than it appears to, so inspect agent folders in unfamiliar repositories before opening them.
