I've had a bad situation with a model adding a space between parameters `rm -rf ~/ folder` and nuking a portion of my homedir. This was of course running out of sandbox since I'm a fool, but lesson learned and I immediately implement sandboxes with nono and it's always fun to see the data after the agent session is complete, I've seen some weird things/URLs appearing. I've attributed it mostly to omp telemetry n' stuff but I'll try to be more careful about that as well in the future.

Out of curiosity do you happen to use a shell other than bash? I've noticed that all models, both local and cloud ones, tend to make much more mistakes if using, say, zsh. It is a frequent source of frustration for me.

Do you remember details about the rm -rf ~/ folder thing? Model, harness (omp?), context window size, reasoning effort (none/low VS anything higher is enough), when it happened?

Without those details, it's an interesting cautionary tale and a valid anecdote, but as actual practical datapoint, it's useless.