Risk warning or disclaimer may need to be added

## Background

As a user of opencode on Windows, I recently encountered an accident that might serve as a warning for others. During one conversation, opencode (with V4 Pro Max) needed to delete files of **current folder**, so it decided to invoke a PowerShell command:

```json
{
"description": "Remove all files in workspace",
"command": "Remove-Item -Recurse -Force $env:WorkDir\\*",
"workdir": "D:\\untitled"
}
```

The problem is that `$env:WorkDir` was a hallucination from model—it doesn’t actually exist:

- Thus, the above command is equivalent to the dreaded `rm -rf /*`.
- Moreover, opencode’s external directory rules were imperfect and did not match expression like `$env:WorkDir\*`, which led to **the deletion of entire disk partition**.
- What's worse, Windows enables TRIM for SSDs by default, causing files larger than 1KB to be zeroed out, making them nearly impossible to recover.

I had already been using claw-like agent tools in an isolated environment, thinking I was being careful enough. But never expected that this kind of coding agent could **easily** and unexpectedly wipe out partitions.

## IMO

After researching similar agents, I found it's difficult to avoid such accidents for most agents, as long as they allows calling bash instructions.

At present, perhaps this repo can add a notice to inform users of the **risks** associated with agents, just like the notice before installing opencalw.