Is it safe to run Line CLI in auto mode?

Auto mode lets Line edit files and run commands without asking, so it's as safe as the commands the agent chooses. Many people use it, with some precautions:

1. Use version control. Commit before big tasks so you can roll back anything, including changes made by shell commands (which /undo doesn't track).
2. Add deny rules for dangerous commands: "deny": ["bash(rm -rf*)", "bash(git push*)"].
3. Turn on the sandbox on macOS or Linux: "sandbox": "auto".
4. Watch the first few steps of a new kind of task.

Safety rails stay on in auto: secret files and outside-project reads still ask, and prompt-injection detection switches back to asking.