Intermediate
Open
Free
What Bash(*) Actually Lets a Session Run
To stop prompt fatigue, a teammate adds Bash(*) to
permissions.allow for a two-week contractor engagement.
Besides routine commands like npm test, what does this rule also
allow?
Solution
The correct answer is "Any Bash command at all, including rm -rf
and force pushes."
Permission rules match on a command's shape, not its intent —
Bash(*) matches every possible Bash invocation the agent might
construct, destructive or not. It is not limited to commands
starting with a recognized package manager, it does not carve out an
exception for destructive operations, and it grants strictly more
than Manual mode's defaults — that's the entire reason it removes the
one human checkpoint on irreversible actions.
Share this question