Unclear It is not stated whether a command refused by this check is put to you for approval or blocked outright.
Before running some shell commands without asking you, Claude Code reads them to make sure they are safe. That check is now stricter:
- It refuses an unquoted pattern such as
*.txtplaced beforessh,gcloudor similar commands, because a pattern that matches no file, or an empty value, can vanish and let the next word take its place. The message tells you to quote it or name the files. - It warns about the
--ssh-flagand--scp-flagoptions ofgcloud. - It handles
execcommands in the style ofkubectl exec. - It refuses
typeset -iandtypeset -Fdeclarations of special variable names. - It no longer treats variables that bash or zsh set themselves as harmless.
Claude Code's built-in default turns these extra checks on, though the server can change that.
More compound shell commands will stop passing this automatic check. To get past it, quote patterns or list files by name.
tengu_hollow_sandpiper Not enough to sayNothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.315: not a boolean we can read
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.315. It isn't a statement about your account. What a flag value here can and cannot tell you
It is not stated whether a command refused by this check is put to you for approval or blocked outright.