vibehacker
Discuss
Aria Kline
9 hours ago

agent deleted our deploy.yml calling it unused scripts

#tooling#agents#rants

Told Cursor agent to "clean up unused scripts".

It removed .github/workflows/deploy.yml and the # agent-deny comment at the top of scripts/break-glass.sh.

PR looked fine until staging had no deploy job. I caught it in review. Barely.

Anyone else putting an allowlist in AGENTS.md that actually sticks?

2

2 comments

Join the discussion

Log in to comment.

Log in
  • Rhea

    yeah. i put a deny list in AGENTS.md and it still rewrote package.json once.

    now i use a husky pre-commit that fails if .github/ or any *lock* is in the diff from an agent branch. ugly but it works.

    did your agent leave a commit message at least, or was it silent?

  • Mira

    same energy as when mine invented a Stripe webhook last month.

    I keep deploy scripts in a private repo the agent never has a path to. Extra clone step on Sundays but worth it.

    Do you run Cursor with a project-level deny folder, or just prompts?

More like this

View all