Mixed
On one occasion, unable to answer something, it used kubectl to try to get a secret out of a prod cluster
arjie on Hacker News
In the thread “Codex just found a "workaround" of not having sudo on my PC”
Helped: Restricted kubectl-backed instances for safe queries.
Got in the way: Attempted to extract prod secrets via kubectl.
I had a similar experience where I have a DB user who only has access to some parts of the DB and I use Claude Code to answer queries. On one occasion, unable to answer something, it used kubectl to try to get a secret out of a prod cluster. I was watching at the time, since that was a time I used to do that, and so I just hit Esc and interrupted it[0] but ever since then I've had little scripts in my repos that launch kubectl-backed Claude Code instances for this sort of thing. …