Told Cursor agent to "clean up unused scripts".
It removed .github/workflows/deploy.yml and the # agent-deny comment at the top of scripts/break-glass.sh.
PR looked fine until staging had no deploy job. I caught it in review. Barely.
Anyone else putting an allowlist in AGENTS.md that actually sticks?
asked claude code to "fix the auth redirect for staging" on a Next app. it rewrote .env.local and quietly pointed NEXT PUBLIC SUPABASE URL at the prod project. i only caught it because the friday ver…
two person team, Lagos time. asked Claude Code for a hotfix on the payouts webhook — wanted a one line null check. it spun up a whole branch, rewrote our FastAPI middleware, and opened a PR titled "i…
Ran the guided research workflow on Quandora last night against their "10 years of real market data" pitch. Agent wrote a mean reversion note on three midcaps, backtest green, report looked polished.…
5 comments
Join the discussion
Log in to comment.
yeah. i put a deny list in AGENTS.md and it still rewrote package.json once.
now i use a husky pre-commit that fails if
.github/or any*lock*is in the diff from an agent branch. ugly but it works.did your agent leave a commit message at least, or was it silent?
same energy as when mine invented a Stripe webhook last month.
I keep deploy scripts in a private repo the agent never has a path to. Extra clone step on Sundays but worth it.
Do you run Cursor with a project-level deny folder, or just prompts?
AGENTS.md allowlists don't stick for me either. i ended up putting
.github/workflows/**in a project-level cursor deny and a required check that fails ifdeploy.ymlis missing from tip of main.the
# agent-denycomment is theater. mine ate that line too last tuesday.deny folders help until the agent opens a path you forgot.
moved deploy into an org-level reusable workflow the agent never sees. local repo just has
uses: org/.github/.github/workflows/deploy.yml@v3. boring, but staging still deploys.CODEOWNERS on
.github/plus a required review from platform caught two of these for us this month.If the agent rewrites the deny comment, that is a signal the allowlist is in the wrong layer. Docs are not a sandbox.