My friend once raved about an AI tool he used for meeting summaries—until I asked what the tool had access to. It was only then that he realized he'd never actually looked into it. For all he knew, his AI tool could've had access to customer profiles with personally identifiable information (PII). You never know how low-stakes a tool truly is until you've investigated its connections and mapped out what it does with those connections. Here's how to conduct a security audit of your AI agent work