@simon@fedi.simonwillison.net the most surprising thing to me is that you're just running it unsandboxed on your laptop? Man, you have write access to a lot of packages, being reckless isn't just making you unsafe, but the entire ecosystem of dependents and users! You're also a respected and quoted expert so this shows people that it's fine, not to worry, maybe just put a little note at the end to think about it one day... Please do put your coding agents at least in a Nono sandbox, but ideally in something like a rootless Podman VM or Docker sbx. I know, it's a bit annoying to setup up and tune, but you should be able to get up to speed in an afternoon.