No
that has resulted in it slurping secrets (even a partial read I've had to rotate keys for)
data-ottawa on Hacker News
In the thread “Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files”, replying to this comment
Helped: Building a shell argument parser and SQL expansion hooks for better review.
Got in the way: Default permission prompts truncated commands and allowed secret ingestion.
… Centralizing a curated collection of known command structures and their side effects would help a lot. I don't know if Claude does this already, but it doesn't work with things like `gcloud` from my experience, and that has resulted in it slurping secrets (even a partial read I've had to rotate keys for). Claude uses bigquery in the command line by piping sql files from /tmp into the `bq` command. …