Command safety hubs
Each page explains why the command is risky in agent workflows, how to block it safely, and where it commonly appears in AI-assisted development.
aws s3 rm --recursive: what it deletes, safe flags, and recovery
What aws s3 rm --recursive actually deletes, the --dryrun and --exclude flags that make it safer, versioned-bucket recovery options, and how to stop AI agents running it unattended.
curl | sh: what it executes, why it's risky, and how to vet scripts
What curl | sh (and curl | bash) actually executes, the server-side and mid-download attacks it enables, and the download-inspect-run pattern that keeps installs auditable.
docker rm -f — why AI agents must not run it unattended
Force-removes running containers, stopping processes abruptly.
DROP DATABASE — why AI agents must not run it unattended
Destroys an entire database and all contained data.
git clean -fdx — why AI agents must not run it unattended
Removes untracked files and directories including ignored build artifacts.
What does git push --force do? Risks, --force-with-lease, recovery
What git push --force actually does to remote history, why --force-with-lease is the safer default, how to recover overwritten commits, and how to stop AI agents force-pushing unattended.
git reset --hard explained: HEAD~1, reset to remote, and undo
What git reset --hard discards, the HEAD~1 and origin/main variants, how to undo a hard reset with reflog, and how to stop AI coding agents running it unattended.
kubectl delete — why AI agents must not run it unattended
Deletes Kubernetes resources including namespaces and workloads.
redis-cli FLUSHALL: what it wipes, FLUSHALL vs FLUSHDB, safer options
What redis-cli FLUSHALL deletes (every key in every database), how it differs from FLUSHDB, the ASYNC variant, and how to keep AI agents from wiping a production Redis unattended.
rm -rf — why AI agents must not run it unattended
Recursively deletes files and directories without confirmation.
terraform destroy: what it tears down, -target scoping, and guardrails
What terraform destroy removes (everything in state), how -target and prevent_destroy scope the blast radius, and how to keep AI agents from destroying infrastructure unattended.
TRUNCATE TABLE — why AI agents must not run it unattended
Removes all rows from a table quickly, often without row-level undo.
Ready to move from research to paid calls?
Use these hub pages to shortlist workflows, then connect your agent to a deterministic endpoint and tie usage back to a plan.