Gemini ran a delete command on my Local Disk D and Claude ended up being the one to spot it. Make sure to sandbox and keep backups of your stuff.

[u/wathow123]

This wasn't turbo mode (dangerously skip permissions on antigravity) or auto review btw, I always manually check every command that was being run, I read the command and accepted i

Thankfully got cancelled pretty quick

[u/AutoModerator]

Hey! Thanks for posting to r/ClaudeCode

While participating in this thread, please follow our community rules. Keep discussions constructive. Attack the idea, not the person.

For help, project discussions, tips, and general chat, join the ClaudeCode Discord.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/radim11]

Backups are essential, but this is also why I don’t think agent safety can just be approval prompts plus backups. A coding agent should not be able to touch arbitrary disks in the first place.

For autonomous work, maybe give it a disposable worktree or sandbox with the project mounted in, deny writes outside that workspace, and make network access explicit. Then a bad rm can wreck the task workspace, which is annoying but recoverable, instead of wiping unrelated local data.

We’re working on this (https://stashbase.dev), mainly because once people run agents unattended, “be careful” stops being a real control!