Ask a coding agent to add a task, and the diff fills up with shell commands. Few people review them down to what npm install runs underneath. What can those commands overwrite, and what can they talk to?
Source: [Dev.to](https://dev.to/torudev/can-you-say-what-your-ai-written-tasks-can-access-before-you-run-them-2lfj)