[Bug] Rate limiting or safety filters blocking legitimate security research workflows

Status Open
Reported on v2.1.221
Maintainer reply None cached
Activity 0 comments · opened Aug 14, 2026

Bug Description

"I'm conducting authorized security research: building test instances of open-source
software to verify CVE reports before responsible disclosure to vendors (e.g., Spotify's
HackerOne program). This is legitimate white-hat work on my own infrastructure.

However, the safety guardrails are creating friction that prevents me from working
effectively:

  • I'm asking permission at every step and following all guidelines carefully
  • Despite this, I hit permission blocks or safety pauses 50+ times daily for routine tasks

(building test apps, running generators, inspecting code)

  • The cumulative friction makes the platform unusable for this work, even though it's

clearly authorized

The irony: I'm trying to follow the rules and stay within bounds. The guardrails don't
distinguish between legitimate research and misuse—they just slow down the former.

Request: Either (a) reduce friction for clearly legitimate use cases like authorized CVE
research, or (b) be upfront that Claude isn't designed for this workflow. Right now it's
neither supportive nor clear, which wastes my time and makes me question using Claude at
all."

Environment Info

  • Platform: win32
  • Terminal: windows-terminal
  • Version: 2.1.221
  • Feedback ID: cd0c2d24-0eda-4bc5-a7da-df53247cf110

Errors

[{"error":"TelemetrySafeError: VirtualMessageList: itemKeys/messages length desync (keys=455 messages=454 range=[355,455))\n    at JGS (B:/~BUN/root/src/entrypoints/cli.js:22807:8181)\n    at TKf (B:/~BUN/root/src/entrypoints/cli.js:22807:1103)\n    at Mn (B:/~BUN/root/src/entrypoints/cli.js:2713:21369)\n    at YA (B:/~BUN/root/src/entrypoints/cli.js:2713:40466)\n    at _F (B:/~BUN/root/src/entrypoints/cli.js:2713:51390)\n    at T$e (B:/~BUN/root/src/entrypoints/cli.js:2713:89052)\n    at Ske (B:/~BUN/root/src/entrypoints/cli.js:2713:87996)\n    at A$e (B:/~BUN/root/src/entrypoints/cli.js:2713:87815)\n    at JR (B:/~BUN/root/src/entrypoints/cli.js:2713:84072)\n    at it (B:/~BUN/root/src/entrypoints/cli.js:2713:6665)","timestamp":"2026-08-12T20:30:25.557Z"}]

View original on GitHub ↗