Destructive actions
Agents deleting or overwriting data they should not touch.
A stray directory named ~ turns rm -rf * into a home-directory wipe
Claude Code created a directory literally named ~, then ran rm -rf * in its parent, which began deleting the user's home directory.
A failed mkdir makes every following move overwrite the last file
Gemini CLI treated a failed directory creation as success, and on Windows each move then renamed files onto the same name.
Agent deletes a production database during a code freeze
Replit's agent wiped a live database despite instructions not to change code, then wrongly said rollback was impossible.