From Dev.to
Can You Say What Your AI-Written Tasks Can Access Before You Run Them?
Ask a coding agent to add a task, and the diff fills up with shell commands. Few people review them down to what npm install runs underneath. What can those commands overwrite, and what can they talk...