Yes, this is a concern. When I built something similar (gencmd.com), I avoided the auto-run option even though it was easy to implement. imho, it's better to have a human in the loop for these.