Yes indeed, it can be a scary thing... although given it was an agentic social site, there is a bit of damage control built into it, as in theory it's only read by agents.
But I think the risk of prompt injections is just too much to connect your "production" agents things like this.
Maybe in tim...