11 ms·
Personally I prefer my agents not to run random commands on my machine without me telling them to first. Imagine you just cloned some random project from GitHu
by simonw 9mo ago
Personally I prefer my agents not to run random commands on my machine without me telling them to first.
Imagine you just cloned some random project from GitHub and fired up Claude Code in that folder, but it turned out to be malicious and running 'npm test' stole all your files.
- suddenlybananas 9mo agoIf it's super intelligent, surely it could glance at tests before running them and figure whether it was malicious or not.
- simonw 9mo agoTests have dependencies. Crawling all of those dependencies to check for malicious code could require inspecting millions of lines of code, if you could even obtain the code. It's also beginning to sound like needing to solve the halting problem.
- suddenlybananas 9mo agoCome on man. You're being unserious here.
- simonw 9mo agoI'm really not. You're the one arguing about a "super intelligent" strawman.
- suddenlybananas 9mo agoLook, I know you have a lot invested in this project but I don't see why you think it is somehow unreasonable to expect an AI agent to run tests in a repository. You don't need super intelligence for that.
- simonw 9mo agoOf course I went agents to run tests in a repository - I do that all the time. I don't want the agent to run tests in a new repository until I've given it the go-ahead to do that.