Claude pwned me today. I thought I had locked it down so much that it literally couldn't do anything I wouldn't want it to do, but it still found a way to push a commit. I forgot that my token for the GitHub CLI isn't read-only:

I fear the day Claude accidentally comments as me on GitHub.