Claude has a very tenuous grasp of the relative path of any of its terminals. I check in and push to branch about every request because it can and has written meta programming scripts that seem almost reasonable that blow away the entire working directory. That is on top of the times that it literally just 'cleans up' the wrong path in one liners that you have to catch. Between Claude's refactoring metaprogramming vs. using given IDE(cursor) tools and that it often works around IDE protections in the terminal, it is kind of nuts to trust it for more than the one prompt. cursor also seems to promote some behaviors that are very dangerous as attempts to limit it parent directories or gitignore/cursorignore files encourages Claude to start grepping and listing files it can't get from the IDE.
Right now Claude and cursor are pretty dangerous for large projects, especially if it falls out of the context window and continues working after starting the 'probing' behavior for whatever legitimate debugging or testing it was attempting. It is incredibly dangerous if doing devops or file utility project work. Mocking everything in docker is also dangerous as it prefers to verify/run docker commands itself and then quickly forgets about docker and does those commands on the local system.