1- Server credentials (username/password) written right in the main .md 2- A large part of the backend not in the repo but hand-written into the deployed container and edited via API calls 3- Accounting transactions done with floating-point numbers 4- Transactions confirmed and rejected by an LLM via full-access tool, no human intervention needed This is not to shit on the person who built an entire (quite impressive in features!) app with no tech background — but gosh I wish there was more publicity about things that can go wrong. Maybe a subscription from Anthropic to run an agent watching over your codebase for the reddest of flags or smth (Haiku must do)? *Okay, Claude did, but I can still take credit right? submitted by /u/vzakharov
Originally posted by u/vzakharov on r/ClaudeCode