alt Hacker NewsI don't use yolo mode but if you allow your agents to both write code and run/test it, then it's basically equivalent to running in yolo mode anyway.
The other day I caught Claude including a rm -rf equivalent (fs.rmdir({ recursive: true, force: true })) in my code, to clean up temporary directories. It was fine, but that kind of code is only one misconfigured environment variable away from blasting away your $HOME.
Replies
coldtea • today at 10:07 AM
>if you allow your agents to both write code and run/test it, then it's basically equivalent to running in yolo mode anyway.
I don't. I manually check the code line by line before. And also run them in container anyway.
I've set up a second user on my machine just for running AI. That way I have the additional layer of OS protections against it doing something like that.