Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Does it still go "your project is using git, let me just YOLO stuff" on first startup?

My essentials for any coding agent are proper whitelists for allowed commands (you can run uv run <anything>, but rm requires approval every time) and customisable slash commands.

I can live without hooks and subagents.



> proper whitelists for allowed commands (you can run uv run <anything>, but rm requires approval every time)

This is a nearly impossible problem to solve.

uv run rm *

Sandboxing and limiting its blast radius is the only reliable solution. For more inspiration: https://gtfobins.github.io/




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: