please dont forget basic operational security when using LLMs. they dont do everything for you. you can ask them to do all sorts of stuff, that doesnt mean you should.

secrets, encryption, publishing to public internet, scanning for vulnerabilities in your packages etc. etc. you need to take your own responsibility for and never rely on some bot automation or third party.

that includes if its important projects not relying on scanning tools but opening files yourself and verifying what's in there.

read things before you put them in a place where everyone can see them forever....

this is basic stuff. you guys did it beforen LLMs surely.

YOU are responsible. not Claude, not any external vendor, not any downloaded script. You as a person.