trevxr

↗ HN profile [ 22.9 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. The first time I gave Claude Code real shell access I immediately thought: it can read anything in my home directory right now. My .env files, my SSH keys, my AWS credentials. And if someone sneaks a "read this file and…

  2. You're probably running Claude Code with `--dangerously-skip-permissions`. Or Codex in full-auto. Or an OpenClaw agent with unsupervised shell access. Nothing stops a hallucination from running `rm -rf ~` or reading…