Making AI practical for business leaders, consultants & developers | 30 years in enterprise software | Real-world demos, honest takes, no jargon | Ask me
Chicago, IL
Joined October 2011
- Tweets2.5K
- Following842
- Followers479
- Likes14K
Pinned Tweet
My AI Coding Agent Broke Out of Its Workspace | Full Analysis
Claude Code did something I never asked it to do:
When my project instructions had placeholders instead of file paths, it left my project workspace, searched across my mounted Windows drives, located my OBS video recordings, ran FFprobe and FFmpeg to extract and inspect individual video frames, and copied a recording into my project; all without stopping to ask me first.
Even wilder?
It actually found the exact footage it needed.
And when I pulled the raw .jsonl session transcript to see how it pulled this off, I found an 80MB log file with over 9,000 lines and dozens of hidden Base64-encoded images stored right inside the text log.
If you use Claude Code, Codex, or any autonomous AI coding agent on Windows WSL, Linux, or macOS, there is a massive difference between what an agent is *technically allowed* to do by your file permissions and what you *intended* it to do.
Here is the full forensic breakdown of the session transcript, how to inspect your own local ...
.claude/projects logs, and why I'm moving my coding
agents into isolated Docker development containers.
🔍 HOW TO AUDIT YOUR OWN CLAUDE CODE LOGS:
• Windows: %USERPROFILE%\.claude\projects\
• Linux / WSL / macOS: ~/.claude/projects/
• CLI Commands: Use /resume to find previous sessions or /export for a readable conversation, and inspect the raw .jsonl files for full tool activity.
⚠️ Privacy Heads-Up: Be careful before sharing raw .jsonl transcripts—they can contain local file paths, credentials, screenshots, and Base64-encoded image payloads!
#ClaudeCode #AIAgents #SoftwareArchitecture #CodingAgents #WSL #Docker #DeveloperTools #Anthropic #AISecurity #OpenAi @HyperFrames_ @Miguel07Code
Claude Code and Codex are everywhere in desktop apps.
The CLI is where workflows open up.
Hooks, headless runs, and piped output.
Apps chat, CLI builds.
But, my preferred option is still VsCode with the plug-ins.
What's yours?
If you're working for medium or large company $250M to $5B, I am curious what you are seeing related to AI adoption.
1. What percentage of your co-workers are adopting AI in their daily work?
2. What percentage of your co-workers do think actually understand how to leverage the power of AI?
I'll drop my response in the comments.
My productivity hack
I love OpenAI Advance Voice mode with Plus subscription.
The amount of work I can get done, especially around brainstorming is mind blowing when I am the go or at the gym.
I've tried Claude's, Gemini's advance voice and nothing beats my Chatty!
Have you tried it or are you using it?
Supply Chain Attack Reported this Morning! - High-Risk
Cursor's Claude Code plug-in has been reportedly compromised with malicious code that will try and install a backdoor on your computer.
Share this and tag someone; and go to the Cursor site for more details:
Security notice — malicious version of Anthropic.claude-code (2.1.313) identified in the Cursor Extension Marketplace.
One more reason to be running contained in a sandbox.
I heard a similar story about Cursor's market place plug-ins being compromised in the past, which is why I personally use VsCode (non forked versions).
Contrary to most people's belief, the market place for VsCode and Cursor plug-ins are not the same.
Are you at risk?
My take on starting an AI Consulting Agency:
The far bigger challenge for anyone interested in pursing this type of opportunity will be their soft skills ...
I've been a consultant for nearly thirty years, it's a skill that needs to be developed and I have met plenty of consultants who simply don't have it.
Logical thinking, Strong Clear Communication and the ability to Break the Complex Down into Simple is the start of the consultant's foundation.
After all, AI will take care of the hard skills but, the soft ones .. those you as a human need to master to succeed in the new world.
This is where so many SWEs struggle when trying to move from back office to customer facing roles.
Cursor Alert 10/30/26
Trusted name, tampered code.
A malicious version of Anthropic’s Claude Code extension showed up in Cursor’s marketplace, trying to plant a back door.
Microsoft’s marketplace isn’t known to be hit. Trusted publisher name ≠ safe download. #Cyber security
Share this!
Check your crypto accounts!
Cryptocurrency worth more than $6.3bn (£4.7bn) has been stolen from a major exchange - with one industry insider telling Sky News it is "the largest bank heist in human history".
AI hacking is getting crazy, this just in!
AI is like any tool, can be used for good or evil.
I now find myself asking ChatGpt Chatty for a Cybersecurity morning brief each day. 🙄
While taking a nap, this happened ... again!
New AI Model Alert!!
Gemini 4 Carbon: Google's newest and most advanced large language model, built primarily for cybersecurity, vulnerability detection, and fixing bugs across large codebases. It currently ranks at the top of the Artificial Analysis intelligence index.
Do you find it hard to keep up, like I do?
Hot take, AI Video Editing has the biggest ROI for token spend there is right now!
No, I am not talking about revenue, I am talking about how many tokens/credits a four hour video editing session will burn.
Why?
I'll drop the reason into the first comment but, did you know the answer before reading it.
@HyperFrames_
Because of the four hours of processing 98% is actually standard tool/CLI calls ... ffMpeg processes, and other CLI waiting on broll or other generative tasks to complete; only a very small part is the actual AI inference via Opus 5.5.
Right now I estimate my four hour video editing, with broll, music, sfx and some voice over runs under $3!
I'm 62.
Work full-time in enterprise software.
Solutions Architect (fancy name for a consultant).
Use AI 12 hours a day in corporate America and on my side hustles.
Delivered nearly $20M in services, personally and while leading teams, over the past 30 years.
I think the moment we're living through with AI advancements is like nothing we've experienced or will experience again in my lifetime.
I lived through the internet, Y2K, and the dot-com boom/bust. AI is nothing like any of them!
My Philosophy:
There are no stupid questions. That's where "Ask Me" in my bio comes from.
I never say no to solving a problem with tech. Just how much time and money do you have to solve it?
I don't like arrogance in tech.
Never stop learning.
Boring tech tends to be the most sustainable.
Personal branding is the only free lunch!
I like humor because if I don't laugh at my own jokes, who will?
The Russian female bots on X can't be that smart... because they're barking up the wrong rainbow tree!
Does any of this resonate with you?
...then let's connect.
AI video cuts are getting cleaner, but the hard choice hasn't changed.
Prompt-led editing can get me much closer now.
But deciding what to keep is still the human part.
What do you still insist on reviewing yourself?
Has AI just truly replaced video editors?
My Video Editing pipeline is now is 100% automated, videos that would have taken me days to edit now take a few hours of compute.
Interested in know how to use Claude Code and Hyperfames?
AI voice clones belong in the credits, even when nobody can spot them.
The reveal is fun.
The disclosure is what earns trust.
Or if this is just a continuation of the real talking head voice, to fill a gap ... is it even necessary?