Skill: The Sandbox Rule — Give AI Agents a Throwaway Login, Never Your Master Password
AI agents now log into your accounts and click on your behalf. Hand one your admin password and a single bad instruction acts as fully-privileged you. The Sandbox Rule keeps a mistake contained.
What it does. The Sandbox Rule is a simple habit: every AI agent you connect to a tool gets its own scoped, disposable login, never your real one. If the agent goes off the rails, the blast radius is one limited account you can revoke in seconds.
Why it matters. Agentic AI tools now log into your accounts and act for you: browser agents, Cowork, and the newer ChatGPT agents can click, send, and buy. If you hand one your admin password, a single hijacked web page or poisoned instruction can act as fully-privileged you: draining an ad budget, emailing your whole list, or exporting customer records. A scoped login turns that from a business-ending event into a contained mistake.
When to use it. Any time you connect an AI agent to a tool that holds money, customer data, or the power to send on your behalf: email, CRM, bank and card accounts, ad platforms, e-commerce admin, and social.
How to run it.
Make a dedicated login for the agent. Create a separate user or seat, not your owner or admin account. Name it so you know it is the agent (for example, "AI-Agent-CRM").
Grant least privilege. Give it only the one permission the task needs. A booking agent needs the calendar, not billing. A posting agent needs to publish, not to change account settings.
Keep the second factor on your phone. Turn on two-factor authentication that you control, so you stay the final gate on anything sensitive.
Set spend and send limits. Where the tool allows it, cap daily spend, send volume, or transaction size. An agent should never be able to move more than you would approve in one sitting.
Log it and review weekly. Skim what the agent actually did once a week. You are looking for actions you did not ask for.
Revoke when the task ends. When a project or vendor wraps, kill the login. Do not leave a live, credentialed account pointed at your business.
The payoff. Ten minutes of setup per tool buys you the one thing that matters with autonomous AI: a mistake stays small. Give agents power the way you would give a new hire access, in a scoped seat you can pull back the moment something looks wrong.