What are the main risks associated with Copilot coding agent and their mitigations?

Question

Accepted Answer

Risk
Mitigation




Agent pushes code
Only users with write access can trigger work; limited to copilot/ branches.


Access to sensitive info
Firewall-restricted internet access.


Prompt injection
Hidden/invisible characters filtered before processing user input.

Risk	Mitigation
Agent pushes code	Only users with write access can trigger work; limited to `copilot/` branches.
Access to sensitive info	Firewall-restricted internet access.
Prompt injection	Hidden/invisible characters filtered before processing user input.

What are the main risks associated with Copilot coding agent and their mitigations?

Answer with Explanation