Hacker News Reader

Comment by H8crilA | Hacker News Reader

I recommend `??` from GitHub Copilot. It's basically this, but for any command, not just ffmpeg. I use it all the time. And it asks for confirmation to execute the command :)

https://githubnext.com/projects/copilot-cli/

View on HN

How long until someone finds a way to maliciously SEO-ify these tools and cause remote code execution incidents? Is it less malicious if the script only does marketing things instead of more serious harm?

What safeguards are in place to sanitize the output of copilot? I ask this because of course a more experienced user might do that sanitization or sandbox testing themselves, but they probably wouldn't get much use out of copilot in the first place.

There's also aichat's shell integration [1]. Instead of typing a command I describe what I want in plain English in a terminal and then press Alt-E. It replaces the text with a command.

[1] https://github.com/sigoden/aichat/tree/main/scripts/shell-in...

Seems like it now defaults to `ghcs` and `ghce` instead of `??`, `git?` and `explain`. It took me a while to figure that out.

indeed - and because it's a special character you need to do something like this to replicate the ?? shortcut.

  alias \?\?="gh copilot suggest"

Reply on news.ycombinator.com