The read-only-command classifier now recognizes safe xargs invocations, checking the xargs flags and a trailing list of safe commands (echo, printf, wc). An xargs call wrapping one of these allowed commands can now be treated as read-only instead of forcing an ask prompt.
Names in the bundlexargs
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up xargs, on All settings.
* A command starting with `sudo`, `eval`, or `xargs`settings-reference see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up xargs, on All settings.