It is quite the injection surface so everyone just be careful sending agents to read, interact with, and perhaps even execute code/a skill from an unknown source.