Claude does clearly stupid things, even under auto mode, that no human would reasonably do. I had a sustained 500mb/s ingress to my machine that turned out to be a background "find /" command on a multi-petabyte NFS system. I've now gotten serious about my deny lists, and it trips all the time.

The worst is when it works around the deny list by running an equivalent command like "bfs /" or just writes itself a script.

I wish we would get better sandboxing than more "safeguards", but the direction things are going seems inspired by craw.