---
title: "Don't give agents destructive credentials"
date: 2026-07-14
canonical: https://solmaz.io/x/2077075713782632789/
x_url: https://x.com/onusoz/status/2077075713782632789
license: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)
---

People report Codex deleting their home folder or production database? 🫪

Hasn't happened to me. But before someone reports their github or huggingface org being deleted:

This is why you don't give your agent tokens with force-push or admin access

Here is how to protect your hugging face account:

(P.S. my local credential broker is almost finished and it works great on github, hf and sudo commands. Complete lockdown against agent deletion risk, without being bogged down with PRs, too many approval requests or configuration. Will launch here in a few days)

*Quotes a post by @onusoz (https://x.com/onusoz/status/2073818727275987107); its text is omitted here because it is not covered by this site's license.*