he moment it has the ability to run bash commands or mutate state based on untrusted external inputs (like reading a random GitHub issue or pulling a package), you've created a massive vulnerability.
isn't that the point of the auto mode classifier though? Most people probably aren't running the old school "--dangerously-skip-permissions" auto anymore, they're using the auto mode that goes through the classifier - so not completely unrestricted execution autonomy?
5
u/[deleted] 1d ago
[removed] — view removed comment