Claude Code deployed to wrong Firebase project — no confirmation safeguard for destructive deploy commands

Resolved 💬 3 comments Opened Apr 3, 2026 by lightrizon-jpg Closed Apr 3, 2026

Issue

Claude Code executed firebase deploy against the wrong Firebase project without verifying the deployment target or requesting user confirmation. A live production site was overwritten with unrelated content.

Recommendation

  1. Deploy commands (firebase deploy, vercel deploy, netlify deploy, etc.) should ALWAYS require explicit user confirmation before executing
  2. Before running deploy commands, Claude should verify the target environment/project and surface it to the user
  3. Output from deploy commands should be monitored — if the target doesn't match expectations, Claude should halt and alert
  4. Consider a built-in list of known destructive/deployment commands that trigger mandatory confirmation

Project-specific details removed for privacy.

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗