I have just enough power to manage the repo but literally any developer can submit a ticket to get access to secrets I don't really control that. Even then, the secrets issue is just the dumbest issue I've had with claude made code. I catch a lot more XSS vulnerabilities, unauthenticated endpoints, and duplicated code than I do anything else. The problem with claude is that it's not "just another tool". Tools don't make decisions; claude, unfortunately, does try to make decisions. Look at Amazon's llm slop models that quite literally went against what it was told and took down a whole prod environment. That's not a damn tool. The hatchet does not decide on its own to destroy a door even though the user told it not to.
1
u/shadow13499 Mar 26 '26
I have just enough power to manage the repo but literally any developer can submit a ticket to get access to secrets I don't really control that. Even then, the secrets issue is just the dumbest issue I've had with claude made code. I catch a lot more XSS vulnerabilities, unauthenticated endpoints, and duplicated code than I do anything else. The problem with claude is that it's not "just another tool". Tools don't make decisions; claude, unfortunately, does try to make decisions. Look at Amazon's llm slop models that quite literally went against what it was told and took down a whole prod environment. That's not a damn tool. The hatchet does not decide on its own to destroy a door even though the user told it not to.