Unclear Whether this check is switched on depends on remote settings whose state is unknown.
What
Some shell commands can be approved automatically, without asking you. Claude Code now refuses to do that for these commands when a value in them could make ssh paste text into a shell command:
rsyncsshscpandsftpgcloud compute ssh
The values covered include RSYNC_RSH, jump hosts, paths given with -F, user names and option names. The refusal says the command "cannot be shown not to be git" and explains how to get it through.
Why
Remote-shell commands are classified more strictly, so you may be asked to approve some of them that used to pass on their own.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Whether this check is switched on depends on remote settings whose state is unknown.