A coding agent asks for permission to modify packages/web/generated/client. ts . The path looks harmless, the proposed diff sounds reasonable, and the user clicks Approve.
Source: [Dev.to](https://dev.to/hefty_69a4c2d631c9dd70724/a-confirm-button-is-not-a-coding-agent-security-boundary-5700)