Only approve a code from an agent you asked to connect. You can revoke access later from your library.