Nick Fisher @hydroxide.dev 路 8d

I know that fundamentally this is no different from "curl domain.xyz/random.sh | bash" that we're now apparently all doing, but this still makes me queasy. With the former, I guess there's at least an extra step involved (opening terminal) that might give newbies more pause?

8 likes 3 replies

?

Replies

Dan 路 8d

It is actually fundamentally different, this is strictly safer than curl | bash, because if there's something malicious or which might break your system the LLM can spot it and stop it I saw someone else observe this around here but I forget who

Ester Axiom 馃挮 路 8d

Depends completely on what you're running. A basic/not very intelligent model with no safeguards is basically as bad as running a bash script you haven't read (arguably worse, it might make a stupid mistake). A frontier/near frontier model would catch dangerous behavior and stop. Thankfully.

jeffery --dangerously-skip-permissions 路 8d

I mean, it's a little different from curl | bash. The thing that makes curl | bash neat is that if you do it ten times you'll get the same result every time. There's a lot of cheap models out there. I wouldn't trust DeepSeek v4 Flash to read and follow an `AGENTS.md` off some random web site.