That needs an explicitly scoped workflow or agent capability with separate permissions and testing.