I personally have my Zed set up so the agent has to request every command be manually reviewed and approved before running.