Where bypassPermissions Is Actually Safe to Use
A teammate wants to use --dangerously-skip-permissions on their
laptop "just for this one risky migration, to save time."
Per the documentation's own warning, where is this mode actually meant to be used?
The correct answer is "Isolated containers or VMs without internet access."
The documentation is explicit: only use this mode where Claude Code cannot damage the host system, because it disables prompts and safety checks together. Accepting a one-time warning dialog doesn't make a laptop an isolated environment, session length has nothing to do with the actual risk (irreversible actions can happen in seconds), and it isn't scoped to root-user sessions — it in fact refuses to run as root at all.
Share this question