[ghuntley]

> anyone have thoughts on the security aspect

Yes, you need to run these agents in a sandboxed environment when running full AFK [1] yolo. That could be a Docker container or it could be remote developer environment.

[1] https://ghuntley.com/ralph

[pjm331]

They are talking about the fact that you can run this npm tool without installing it - not running code agents

[ghuntley]

Ah, that's the least of their issues!