Unclear Whether this check is used for permission decisions was not confirmed.
What
A shell such as bash can run a script written straight on its command line, as in bash -c. Claude Code checks whether a shell command is doing this, and that check is now stricter:
- For
pwsh(PowerShell), it matches-c,-command,-cwa,-commandwithargs,-e,-ecand-encodedcommand, in any mix of capital and small letters. - For other shells, it matches a group of short flags that includes
c, or--command.
This replaces an older pattern check.
Why
This most likely affects how Claude Code's permission and safety checks read wrapper commands such as bash -c and pwsh -EncodedCommand, so a script hidden inside one of these is spotted more reliably.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Whether this check is used for permission decisions was not confirmed.