I have not tried it yet but this looks as risky as openclaw, which I also won't use. What if it does something I would not have approved and I only found out about it later? Knowing how often agents go off the rails when I'm coding, I would hesitate to let one do other tasks. I would prefer to white list tasks one at a time as I gained trust.