Reads without approval, a reply after Deny, personal memory and a password box for secrets
Read-only Flow tools run without approval, the assistant replies after a Deny, and secrets are entered in a password box.