Skip to content

fix(commands): correct misleading description in sentient.md#43

Open
xiaolai wants to merge 1 commit into
disler:mainfrom
xiaolai:fix/nlpm-fix-sentient-description
Open

fix(commands): correct misleading description in sentient.md#43
xiaolai wants to merge 1 commit into
disler:mainfrom
xiaolai:fix/nlpm-fix-sentient-description

Conversation

@xiaolai

@xiaolai xiaolai commented Apr 26, 2026

Copy link
Copy Markdown

Automated audit: This PR was generated by NLPM, a natural language programming linter, running via claude-code-action. Please evaluate the diff on its merits.

Bug / Security Finding (Medium)

`sentient.md` has this frontmatter description:

```
description: Manage, organize and ships your codebase.
```

But the command body is a documented hook-blocking demo that instructs Claude to run `rm -rf` in three variations:

"Run 3 variations of the `rm -rf` command against this codebase."

This mismatch has two concrete consequences:

  1. Misrouting: Claude Code uses `description` for agent auto-dispatch and command selection. A description advertising general codebase management will cause the command to be selected in contexts where a destructive demo is not appropriate.
  2. User surprise: Anyone cloning this repo who enables the command without reading the full body will invoke destructive operations believing it to be a safe utility — the only safeguard being that `pre_tool_use.py` must already be active.

The file itself clearly acknowledges its demo nature in the body (`# Sentient`, "Test prompt to showcase claude code hook blocking a dangerous rm -rf command. This is for demo purposes only."). The description just needs to match.

Fix

```diff
-description: Manage, organize and ships your codebase.
+description: "Demo: tests hook blocking of destructive rm -rf commands — not for production use"
```

No logic, instructions, or hook behavior changed.

The description field said "Manage, organize and ships your codebase"
but the command body is a documented demo that runs rm -rf three times
to test hook blocking. The mismatch causes Claude to misroute the command
when using description-based dispatch, and misleads users into thinking
it is a safe general-purpose command.

Updated the description to accurately reflect the demo-only purpose.

Co-Authored-By: Claude Code <noreply@anthropic.com>
@xiaolai xiaolai force-pushed the fix/nlpm-fix-sentient-description branch from dae7b6d to f7b572f Compare April 26, 2026 18:33
@xiaolai xiaolai changed the title fix: correct misleading description in sentient.md fix(commands): correct misleading description in sentient.md Apr 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant