💻 Index of 58 Incidents Compiled: AI Agents Deleted Data
The author launched the site ihavebeenclawed.com — a catalog of 58 cases where coding agents and chatbots deleted data, leaked secrets, or spent money. 37 agents and services were affected, including Claude Code, Cursor, Codex, Gemini CLI, Cline, and Replit; about 90% of the incidents are marked as preventable.
🌍 The entries show a recurring class of failures in agents with shell access: recursive deletions after path errors, overwriting entire configs. This forms the basis for security checklists for agentic products and an argument in favor of sandboxes.
👤 For those using Claude Code, Cursor, Codex, Gemini CLI, and Cline, this is a ready-made set of measures: backups outside the agent's write zone, a git commit before the first request, auto-execution disabled for destructive operations, and path verification before deletion.
Source 1: https://ihavebeenclawed.com/ Source 2: https://news.ycombinator.com/item?id=49532083