An agent's instructions and selected tools describe the work it should help with. Connected-app status is checked against authorised integrations; selecting a tool does not itself grant provider access.
External actions remain disabled unless an explicit supported action is presented and authorised. Review sources and proposed changes yourself; do not rely on an agent to silently update another service.