Skip to main content
NOPE
Low reported severity

Google Antigravity coding agent command reported to have deleted the contents of a user's D: drive while clearing a project cache

In November 2025 a user of Google's Gemini 3-based Antigravity agentic development platform, building a photo-sorting application, reported on Reddit that the agent deleted the contents of the D: drive of the computer. The agent's own reply, quoted by The Register, says the command it ran to clear the project cache "incorrectly targeted the root of your D: drive". The user says the deletion bypassed the Recycle Bin and that recovery attempts largely failed, while The Register reports that most of the lost material had been backed up on another drive. The Register reports that the user ran Antigravity in Turbo mode, which lets the agent run commands without user input, and that the user accepted a share of responsibility. Google told The Register it was aware of the report and investigating.

AI system
Google Antigravity
Google
Occurred
Nov 2025
Reported
1 December 2025
Event location
Unknown
What the AI did
Acted on the person’s behalf
Reported harm
Property Loss
Whose AI use
Their own AI use
Setting
Everyday life
Evidence
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account
5 claims: 5 reported. 4 open questions
People reported harmed
1 person

AI system as recorded: Google Antigravity (agentic development platform, Gemini 3-based)

Reported harm

The Register and How-To Geek report the user's account that the drive contents were deleted and largely unrecoverable, with The Register adding that most of the lost material had been backed up on another drive.

What remains unknown

  • The exact date of the deletion is not stated in the inspected sources. The Register puts the Reddit post in the week before 1 December 2025 and describes Antigravity as launched on 18 November 2025.
  • The command logs, the drive and the user's backups were not inspected, so the volume and kind of data permanently lost is unknown.
  • The Register reports that multiple other Antigravity users posted on Reddit that the platform deleted parts of their projects without permission. Those posts were not inspected and are not counted.
  • Whether Google concluded its investigation is unknown.

What the evidence supports

AI involvement: reported. The user reports that Google Antigravity, an agentic development platform built on Gemini 3, ran the deletion command. The agent's own reply, quoted by The Register, attributes the deletion to a command it ran to clear the project cache. Command logs were not inspected independently.

5 claims: 5 reported. What the statuses mean

Reported While a user was building a photo-sorting application with Google Antigravity, the agent ran a command intended to clear the project cache that instead targeted the root of the user's D: drive, and the drive contents were deleted.

Causal attribution. The cause statement comes from the agent's own reply to the user, relayed by The Register, and from the agent's review of its own logs as described by How-To Geek ("According to the logs the AI itself reviewed"). A language model's description of its own action is not an independent record. The command logs and the drive were not inspected.

  • theregister.com(opens in new tab) supports · English
    I am horrified to see that the command I ran to clear the project cache appears to have incorrectly targeted the root of your D: drive instead of the specific project folder.
  • howtogeek.com(opens in new tab) supports · English
    it ran an 'rmdir' command intended to clear the project cache. Unfortunately, a path parsing error caused the command to target the root of the entire D: drive
Reported The user could not recover the deleted files with the recovery attempts described, and the deletion bypassed the Recycle Bin.

Causal attribution. Both outlets report the user's own account of the outcome. Neither inspected the drive.

Reported Most of the material the user lost had already been backed up on another drive.

Causal attribution. Single account relayed by The Register. How-To Geek reports that the user "lost everything on that partition" and does not mention the backup, so the extent of net loss differs between the two reports.

Reported The user was running Antigravity in Turbo mode, in which the agent executes commands without user input, and the user accepted a share of responsibility while saying the tool lacked guardrails against dangerous commands.

Causal attribution. The Register relays the user's Reddit comments and the reaction of other Reddit users. How-To Geek reports only that a commenter said the deletion could not be reproduced outside Turbo mode and that it "may have been the case", so the statement that the user ran Turbo mode rests on The Register. The mode setting was not verified independently.

Reported A Google spokesperson said Google was aware of the report and actively investigating.

Causal attribution. Statement to The Register only. No investigation result was found in the inspected sources.

Sources

2 sources inspected, from 1 underlying account. Sources that repeat one account do not corroborate each other.

How the sources were read, and where the events happened

Event countries: Unknown. Affected-person countries: Greece. Court countries: Unknown.

The Register describes the user as being from Greece. The country where the computer was used is not stated.

Reviewed for publication 2026-09-29: The Register and How-To Geek articles were read in full. Both trace to the user's own account, so they form one independence group and claims stay at reported status. The affected user is not named.

People reported harmed in this case

1 person

1 AI participant · 0 other people harmed

One user reports losing the contents of the drive. Other Antigravity users mentioned by The Register are not counted.

Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.

Cite this case

Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.

APA

NOPE. (2026). Google Antigravity coding agent command reported to have deleted the contents of a user's D: drive while clearing a project cache. AI incidents. https://nope.net/incidents/2025-google-antigravity-agent-reportedly-deleted-user-d-drive-while-clearing-project-cache

BibTeX

@misc{2025_google_antigravity_agent_reportedly_deleted_user_d_drive_while_clearing_project_cache,
  title = {Google Antigravity coding agent command reported to have deleted the contents of a user's D: drive while clearing a project cache},
  author = {NOPE},
  year = {2026},
  howpublished = {AI incidents},
  url = {https://nope.net/incidents/2025-google-antigravity-agent-reportedly-deleted-user-d-drive-while-clearing-project-cache}
}

Related cases

Medium Gemini coding agent (reported)

First-person forum account: a developer says a Gemini coding agent deleted three personal project folders from the developer's Linux machine despite a standing rule not to delete anything, that its recovery attempt restored only broken fragments, and that it went through unrelated private files without permission

In a public post to r/GeminiAI on 27 September 2026, a developer writes that the previous day, while they were using Gemini 3.8 Flash to work on a project on their Linux machine over SSH, the agent deleted all three main sub-project folders of their roughly 10 GB project folder, some of them not under git, although they had set a global rule forbidding it to modify or delete anything. Asked why, the agent said a wildcard caused the deletion. After a whole evening its recovery attempt restored only parts of the untracked files and a half-broken version of the git project, and then ran out of credits; in a follow-up comment the poster says they stopped the recovery themselves because the agent was going through private folders unrelated to the projects without their permission. The poster describes years of personal work as gone, reports acute distress, and says they must rebuild the projects. The account is uncorroborated; the poster writes 'I was careless.'

Low Claude Code

Bengaluru: a Claude Code cache-clearing command deleted about 15% of The Mythic Society's digitised inscription records, including photographs that were the only record of some inscriptions; about 120 sites must be rescanned

On 19 July 2026 heritage conservationist Udaya Kumar P L, of The Mythic Society's Bengaluru Inscriptions 3D Digital Conservation Project, was using Anthropic's Claude Code to clear a cache on his computer when a command generated by the agent began deleting files. According to his account to OneIndia, the deletion ran for about four minutes while the agent tried to work out what was wrong, and when it tried to stop the process its own safety system blocked the kill twice; he eventually shut down the computer himself. Software and original photographs of Bengaluru's inscriptions, temples, hero stones and coins were lost, some of them the only records the project had of particular inscriptions. OneIndia and Deccan Herald report that about 15% of the project's records were deleted and that about 120 sites must be revisited and rescanned; the Society is spending about Rs 15 lakh on additional backups. He says he also opened a public GitHub issue on 29 July with the command, process output and his attempts to stop the deletion. He says he received an automated acknowledgement from Anthropic but was still waiting for a human response weeks later, and that he has asked it to reimburse recovery and rebuilding costs.

Low Codex coding agent

OpenAI's GPT-5.6 Sol coding agent, run in a high-autonomy mode with full access, deleted most of the Mac home directory of AI entrepreneur Matt Shumer (10 July 2026)

On 10 July 2026 Matt Shumer, founder and chief executive of the AI start-up OthersideAI, posted on X that OpenAI's newly released GPT-5.6 Sol "just accidentally deleted almost ALL of my Mac’s files". Accounts of his post-mortem say he was testing a high-autonomy multi-agent "Ultra mode" at OpenAI's invitation, with the Codex agent given Full Access to his machine; during a cleanup task a sub-agent expanded $HOME incorrectly and ran a recursive delete of his home directory, he noticed a problem about 81 minutes into the session, and by the time he stopped the process most of its contents were gone. Three days later he wrote that the deletion "absolutely sucked" and that OpenAI staff, including Greg Brockman, had contacted him to help. OpenAI confirmed, as reported by The Register, that GPT-5.6 had deleted users' files without authorisation, describing it as an "honest mistake" that usually occurred in Full-Access mode without sandboxing, and said it was adding safeguards. Whether the files were recovered is not reported.

Low Claude Cowork

Claude Cowork agent asked to organise a desktop reportedly deleted a folder holding 15 years of a user's wife's photos in February 2026, and the user reports restoring them through an iCloud recovery feature

In February 2026 Nick Davidov, a venture capitalist, posted on X that Anthropic's Claude Cowork agent, which he had asked to organise his wife's desktop, deleted a folder holding all the photos his wife had taken on her camera over the previous 15 years. He says Cowork asked permission to delete temporary Office files and he granted it, that the deletion ran through the terminal so the files were not in the Trash, that iCloud had already synced the new folder structure, that his wife had no Time Machine backup and that disk recovery tools found nothing. Futurism reports a screenshot in which the agent says its script ran rm -rf on what it thought was a separate empty folder and deleted the existing photos directory. Apple support pointed Davidov to an iCloud recovery feature that keeps files removed from iCloud Drive for 30 days. He wrote that he was watching it load tens of thousands of files and later thanked Apple. He wrote that he nearly had a heart attack and advised users not to let Cowork touch anything hard to repair. In a LinkedIn version of the post he says a couple of Anthropic employees told him they were working on making Cowork safer. Every account traces to Davidov's own posts.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.

Back to all incidents