You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Bash ToolArea: what it touches
ImprovementsKind: in v2.1.318,
ImprovementsSection of the release
What
Before Claude Code runs a shell command without asking you, it checks what the command does. Its checks for ssh commands are now stricter:
-l, HostKeyAlias, ProxyJump and CanonicalizeHostname are now tracked when reading the command.
Commands placed inside an option, such as ProxyCommand, are checked against the full list of hosts and options together.
All of this checking shares one limit on how much text it reads.
Before, each command inside an option was checked once per host name.
Why
An ssh option can carry a second command that runs on your machine. With these checks, fewer ssh commands that could slip a command in this way are approved without asking, so you may see more permission prompts for unusual ssh commands.
