| ▲ | bethekidyouwant 5 days ago | |
I don’t use Claude, but can it really run commands on the cli without human confirmation? Sure there may be a switch to allow this but If in that case all but the most yolo must be using it in a container? | ||
| ▲ | mr_mitm 5 days ago | parent | next [-] | |
There are scenarios in which you allow it to run python or uv for the session (perhaps because you want it to run tests on its own), and then for whatever reason it could run `subprocess.run("rm -rf / --no-preserve-root".split())` or something like that. I use it in a container, so at worst it can delete my repository. | ||
| ▲ | 0x3f 5 days ago | parent | prev | next [-] | |
By default it asks before running commands. The options when it asks are something like [1] Yes [2] Yes, and allow this specific command for the rest of this session [3] No | ||
| ▲ | stagalooo 5 days ago | parent | prev [-] | |
One easy way to accidentally give Claude permission to do almost anything is to tell it that it’s allowed to run “find” without confirmation. Claude is constantly searching through your files and approving every find command is annoying. The problem is, find has a --exec flag that lets it run arbitrary bash commands. So now Claude can basically do anything it wants. I have really been enjoying Claude in a container in yolo mode though. Seems like the main risk I am taking is data exfiltration since it will has unfettered access to the internet. | ||