GitHub Copilot is no longer only autocomplete. Agent mode in VS Code edits files and runs commands, the Copilot CLI does the same from your shell, and Copilot cloud agent turns an issue into a pull request.
Locally, those agents act with your permissions. Copilot asks before most tools run, but its terminal sandboxes are off by default and a few settings remove every approval at once. This post covers what goes wrong, the incidents, their impact, and the controls that work.