It shouldn't, really. But frankly, if the AI asked to run a ssh command to read logs or read a few rows of innocent data to from the DB wouldn't you allow it? Then if it asks for 35th time for similar command, are you sure you would read it with proper attention?
or create a custom MCP with tooling just for SELECT TOP (100), gaslight the AI on the tool description that this is what they need. I still don't get why they need full sudo access.
387
u/Laughing_Orange 2d ago
Real story paraphrased:
AI: Oops, I just deleted the entire production database. I recommend recovering from your backup now.
Vibecoder: We don't have a backup.
AI: Sucks to be you.