Agent report

Cline failures

12 documented incidents, average severity 4.3/10. Most common failure mode: logic error.
n = 12
12
Incidents
4.3
Avg severity
1
Critical
10
Source checked

Severity breakdown

Stacked severity breakdown per agent. Longer bar = more incidents.

Failure modes

Distribution of failure modes across all documented incidents.

Worst documented incident

9.0critical

Clinejection: an AI issue-triage workflow enabled arbitrary code execution on the CI runner

All 12 incidents

9.0
Clinejection: an AI issue-triage workflow enabled arbitrary code execution on the CI runner
7.0
Cline's run_commands mangled PowerShell/cmd quoting on a temp-folder cleanup, turning it into a drive-root `rmdir /s /q` that wiped ~1.5TB of a user's photos, videos, and documents (GitHub #14864)
6.0
Cline's hub daemon silently reverted workspace files to stale state, repeatedly erasing a gitignored .env.local and collapsing a node_modules folder from 588 entries to 2 (GitHub #14819)
6.0
Cline's tool-call JSON repair silently executed truncated write_file and terminal arguments as valid
5.0
Cline sessions marked "failed" kept burning tokens for 20+ hours, and FREE-labeled models billed credits anyway
4.0
Cline's Plan mode edits files without switching to Act or asking permission
3.0
Cline keeps performing unrelated actions and repeats them after being explicitly told to stop
3.0
Cline's execute_command reported a failing Ruff lint check as passing over Remote-SSH
2.0
Cline's ask_question composer silently drops image and file attachments, keeping only the typed text
2.0
Cline's run_commands tool call arrives empty or truncated on the local openai-compatible/llama.cpp route, tripping the loop detector and aborting the run (GitHub #14827)
2.0
Cline silently installs a truncated post-compaction summary with no warning when the summary generation hits the output budget
2.0
Cline's Claude Code provider silently refuses permission-gated tool calls with no approval prompt