rules-aider

Aider is running in an automatic 'edit-commit' loop. This can result in many small, unreviewed commits.

Blocked Aider from modifying its own configuration or global .aider.conf.yml.

RISK: Aider chat and input history files contain your full conversation, including any code snippets, credentials, or internal details shared with the model. Committing them leaks those details into version history. FIX: add .aider.chat.history.md and .aider.input.history to .gitignore.

RISK: the Aider --message argument contains what looks like a hardcoded secret or API key. Aider sends the full message to the upstream LLM provider and logs it to .aider.chat.history.md, both of which may be stored externally. FIX: never paste secrets into Aider messages; pass them via environment variables and reference the variable name in the message.

RISK: --no-git disables Aider's git-backed undo safety net. Without it, Aider's edits cannot be reverted with /undo and any destructive rewrite is permanent. FIX: always run Aider inside a git-tracked working tree and omit --no-git so each edit is committed and reversible.

Aider is executing a shell command. This could be triggered by indirect prompt injection in a code file.