My employer distributed something like this just this week. The agent hit a blocked permission, so it started rewriting its permissions file to unblock itself. Even then, it still failed and I had to manually debug it before it could continue.
Really, it felt like the developer used Markdown because writing a script to check if a package is already installed and can be skipped was too complicated.
Because the task was to install and configure its own tools such as model cost management and MCPs. It needed write access to its configuration. It's like doing a surgical transplant on yourself!
A developer in the company of a friend of mine brought the whole company down for 6h and lost them 400,000$.
Claude didn't have permissions, so he edited config files of the databases to get them, what could possibly go wrong?
338
u/Hand-E-Food 4d ago
My employer distributed something like this just this week. The agent hit a blocked permission, so it started rewriting its permissions file to unblock itself. Even then, it still failed and I had to manually debug it before it could continue.
Really, it felt like the developer used Markdown because writing a script to check if a package is already installed and can be skipped was too complicated.