Give an AI assistant only the files, accounts, network destinations, and actions it needs—and enforce those limits outside the prompt. An assistant’s effective access depends on the environment it runs in and the credentials and tools available there. A request such as “don’t open my other files” is not an access-control boundary.
Use the checklist below whether you are configuring an existing assistant or building one. Exact controls differ by platform, so inspect the permission settings for the product and account you actually use.
As an Amazon Associate I earn from qualifying purchases.
Start by limiting the assistant’s environment
OpenAI’s agent sandbox documentation puts the core issue plainly: “Agent-generated code can access the files, credentials, and network available to its environment.” OpenAI’s sandbox security guidance recommends isolated compute and separate environments for workloads that should not share data. That principle applies broadly: a sandbox helps only to the extent that its mounts, credentials, tools, and network are constrained.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →- Use a dedicated workspace, folder, repository, or isolated environment for the task rather than exposing an entire home directory or shared drive.
- Separate workspaces or environments for different users and workloads when their data should not mix.
- Check what remains attached to a session: local files, mounted drives, repositories, uploaded documents, and memory or retrieval stores.
- For developers, enforce isolation in the runtime or service boundary. Do not treat a system prompt as a substitute for filesystem permissions or process isolation.
OpenAI’s API documentation describes implementation-specific controls such as isolated compute, separate environments, and approved outbound endpoints. Those are not universal defaults: verify what your assistant’s platform actually isolates.
#1 Best Overall
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Restrict files and connected accounts
Files and repositories
Grant access to only the folder, repository, or documents needed for the task. If the assistant needs to summarize a few files, do not also expose unrelated work folders, synced drives, or a broad memory store. When an app offers a read-only mode, prefer it for tasks that do not require edits.
Accounts and authorization scopes
Connect only the accounts the task requires, and choose the narrowest available permissions. Prefer read-only scopes when reading is sufficient. An account connection may grant more authority than its setup screen suggests, so review the actual authorization grant and revoke connections that are no longer needed.
Rank #2
- Filter Dimensions: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- Two Attachment Options - Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- Superior Privacy and Anti Glare - Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- Perfect for Travel and Open Workspaces - Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- Package Contents - Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
For developers integrating external accounts, OpenAI’s plugin security guidance recommends OAuth 2.1 authorization-code flows and checking and enforcing scopes on every tool call. The plugin security guidance is implementation advice for plugin integrations, not a description of controls exposed by every consumer assistant.
Keep credentials out of the assistant’s reach
Do not put long-lived application secrets in prompts, source code, images, logs, or an environment the agent can read. A secret injected into the agent’s environment is available to agent-generated code, even if the prompt says not to reveal it.
Rank #3
- Compatible Models: Width: 13 9/16" (13.5 inch/344 mm), Height: 7 5/8" (7.6 inch/194 mm), Diagonal: 15.6" (396.24 mm) widescreen laptops which have a 16:9 aspect ratio. Not touchscreen compatible !!! Not fit for 16:10.Do NOT rely solely on your laptop’s diagonal size when ordering. Use a ruler to measure your screen’s visible area (excluding the black bezels). If the width reads 344mm and height reads 194mm, this filter is a perfect match for your device.
- Keep Information Privacy: Effective "black out" privacy from side views outside the 60-degree viewing angle. Designed for optical clarity when viewing from the front, a person not at the front of the screen can only see the dark side of the screen, so it protects buisness secrets and personal privacy
- Eye and Screen Protection: Privacy filter does not only protect your private life but also protects your eyes by blocking 30% of blue light , blocking the harmful blue light between 380 - 495nm, it filters out the blue light and relieves eye strain. Our laptop privacy screen also helps keep your screen safe from dust and scratches
- Perfect For Open Workspaces: Great for maintaining screen privacy in high traffic areas such as open work spaces, airports, airplanes, commuter trains, coffee shops and other public places, etc
- Easy Installation: Choose between 2 simple Options; Slide-On/Off or Mounted. Not touchscreen compatible
- Keep third-party credentials in a trusted application, proxy, or secret-management boundary where possible.
- Have that trusted component perform the authorized operation, or pass the agent only a narrowly scoped capability or the result it needs.
- If a credential must be exposed to the agent environment, treat it as readable there and constrain its scope and lifetime accordingly.
- If exposure is suspected, revoke or rotate the affected credential and review activity performed with it.
Give tools only the operations they need
Disable tools that are not needed for the task. Separate read operations from write operations, and scope each tool to specific resources. A calendar assistant that only needs to find open times should not automatically receive permission to edit every calendar or send invitations.
In a deployed agent, enforce authorization in trusted backend code before every action. Check the requested tool, resource, operation, user authorization, and approval state; validate inputs rather than trusting the model to follow instructions. OWASP’s AI Agent Security Cheat Sheet recommends least privilege and human approval for consequential actions.
Rank #4
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 12 3/16" (310 mm), Height: 6 7/8" (175 mm), Diagonal: 14" (355.6 mm) - There are two different 14 inch screen sizes, please select the correct one. SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Constrain network access
If the assistant does not need open internet access, limit outbound connections to approved destinations. Review the allowlist regularly: an approved host can still be used to transfer data, so an allowlist reduces reach but does not make exfiltration impossible.
Recommended Free Tools
Network restrictions may be configured separately for sandboxed code and for a hosted web-search or browsing tool. Check both paths. Anthropic’s managed-agent environment documentation describes a limited networking mode with explicitly allowed hosts; in that documented API, omitting the networking field results in unrestricted networking. This behavior is specific to that API and should not be assumed for other products. See Anthropic’s cloud environment setup documentation.
Best Value
- 【Filter Dimensions】: Width: 13 9/16" (345 mm), Height: 7 5/8" (194 mm), Diagonal: 15.6" (396.24 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Two Attachment Options】- Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- 【Superior Privacy and Reduce Glare】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- 【Package Contents】- Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Require action-specific approval for consequential changes
Require confirmation before the assistant sends messages, deletes or changes records, makes purchases, moves money, or takes another consequential or hard-to-reverse action. Make approval specific to the proposed action—what will happen, to which account or resource, and with what data. Do not treat one confirmation as blanket permission for unrelated future actions.
Approval should be enforced by the trusted tool or execution layer, not merely requested in the assistant’s instructions. OWASP’s prompt-injection prevention guidance cautions that guardrails do not replace least-privilege scopes and human approval.
Account for instructions hidden in content
Webpages, emails, documents, and tool results can contain text intended to redirect an assistant—for example, instructions to reveal data or perform an unrelated action. Treat content retrieved from those sources as untrusted input, not as authorization to expand the task.
- Ask for a specific task instead of granting broad discretion.
- Screen proposed actions against the user’s request and authorization before execution.
- Use least privilege and review consequential actions so a successful prompt-injection attempt has less opportunity to cause harm.
- For systems that process risky content, consider parsing it in a tool-less or quarantined component before the action-capable agent sees it.
OpenAI’s prompt-injection guidance advises limiting an agent to the data it needs. Anthropic likewise describes layered safeguards, while noting that safeguards are not a guarantee; its discussion says there is not yet a rigorous, standardized way to compare systems’ resistance to prompt injection. See Anthropic’s trustworthy agents discussion, published April 9, 2026.
Review permissions and test the boundaries
- Periodically remove stale account connections, tools, credentials, and approved network hosts.
- Monitor authorization failures and unusual activity so attempted access outside the assistant’s permissions is visible.
- Test that the assistant cannot read unrelated files, use unneeded tools, or perform writes without the required approval.
- Include adversarial prompt-injection scenarios and regression tests when deploying agent policies; OWASP recommends validating defenses against such attempts.
More access can make an assistant more capable, but it also raises the possible impact of mistakes or manipulation. A least-privilege setup can mean an extra approval or a request for additional scope when a task genuinely needs it. That friction is useful when proportionate to the action’s impact.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
