Checklist warns of AI command execution bugs after multiple npm and pip incidents

The author consolidates these incidents into a 16‑item checklist organized into six scenarios—folder launch locations, npm install, pip install, git push and token handling, approval and sandbox configuration, and version verification. Each item is phrased as a yes/no question, with rationale, verification commands, and an Excel template for tracking. The paid section expands the checklist with detailed explanations and a fillable spreadsheet.

The checklist aims to give developers, security teams, and small‑business AI users a concrete way to verify safety before allowing an AI to execute system commands, reducing the risk of supply‑chain attacks and accidental data loss.