How Cursor wiped a subscriber's PC

A subscriber shared a story. The situation is quite trivial: a person asked Cursor to remove duplicate articles in his dissertation, and Cursor generated a command with a quote escaping error. The model used a backslash, forgetting that in Windows \ is a path separator, not an escape character. This slash separated from the path and turned into an instruction to delete the root of drive C and rmdir /s /q began to demolish everything, including system folders. There were no backups, but since the files were not overwritten when deleted, most were restored, although a residue remained.

The moral is quite simple - do not run agents with full access where they can cause irreparable harm. Anything will do - Docker, Mac Mini, some kind of Raspberry Pi, virtual machine in the cloud, the main thing is not on the main machine. Evil tongues may even say that you should not use Windows (at least without WSL). Well, backups should be stored in a place inaccessible to children of agents.

What was your biggest agent failure?

@ai_newz