[Bug] Incorrect permission request classification as locale quoting vulnerability
Resolved 💬 3 comments Opened Jan 27, 2026 by ariccio Closed Jan 31, 2026
Bug Description
Incorrect permission request classification as "Command contains locale quoting which can hide characters"
I got this permission request, that I've never seen before:
Bash command
git diff --name-only main...HEAD | grep -E "\.swift$" | grep -i "model" | head -20
Check for changed Swift model files in iOS
Behavior ask
Message Command contains locale quoting which can hide characters
Reason Command contains locale quoting which can hide characters
Suggestions None ...huh? Is it firing on "\.swift$"?
Environment Info
- Platform: darwin
- Terminal: Apple_Terminal
- Version: 2.1.20
- Feedback ID: 363e3d49-b0c7-4323-8c63-5186fe48cca4
Errors
[{"error":"TypeError: Cannot read properties of undefined (reading 'safeParse')\n at sF6 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5217:25188)\n at nn2 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1314)\n at Kv (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1754)\n at q5 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1683)\n at Object.Xb8 [as isPlatformInEnabledList] (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:244:2532)\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:4750:21550\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:848\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:4887:6400\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:848\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5137:913","timestamp":"2026-01-27T21:22:49.457Z"},{"error":"TypeError: Cannot read properties of undefined (reading 'safeParse')\n at sF6 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5217:25188)\n at nn2 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1314)\n at Kv (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1754)\n at q5 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1683)\n at Object.Xb8 [as isPlatformInEnabledList] (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:244:2532)\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:4750:21550\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:848\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:4887:6400\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:848\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5137:913","timestamp":"2026-01-27T21:22:49.458Z"},{"error":"TypeError: Cannot read properties of undefined (reading 'safeParse')\n at sF6 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5217:25188)\n at nn2 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1314)\n at Kv (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1754)\n at q5 (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5218:1683)\n at Object.Xb8 [as isPlatformInEnabledList] (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:244:2532)\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:4750:21550\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:848\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:4887:6400\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:848\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:5137:913","timestamp":"2026-01-27T21:22:49.458Z"},{"error":"Error: ENOENT: no such file or directory, scandir '/Library/Application Support/ClaudeCode/.claude/skills'\n at Module.readdirSync (node:fs:1569:26)\n at file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:1909\n at bX (file:///Users/alexanderriccio/.nvm/versions/node/v24.10.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:35313)\n at Object.readdirSync (file:///Users/alexanderriccio/.nvm/versions/node…Note: Content was truncated.
This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗