[MODEL] Claude created files outside of my project folder using bash and python without asking permission

Preflight Checklist

• [x] I have searched existing issues for similar behavior reports
• [x] This report does NOT contain sensitive information (API keys, passwords, etc.)

Type of Behavior Issue

Claude modified files I didn't ask it to modify

What You Asked Claude to Do

I get this would be difficult to manage given the nature of Claude Code, but I was doing something really simple, I wanted to create some transparent cursors for wayland so I could use my client cursor via remote desktop without seeing the hosts. It had asked permission to access files outside of the project folder, I declined as it was not needed and then without prompting, it used bash and python to create files in ./local which is pretty nuts.

What Claude Actually Did

Used bash / python to alter files outside of the project folder without explicit permission or prompting

Expected Behavior

Ask permission or warning before changing files outside of the project director

Files Affected

Permission Mode

Accept Edits was OFF (manual approval required)

Can You Reproduce This?

Yes, every time with the same prompt

Steps to Reproduce

Ask claude to create cursor files for wayland, deny access to outside folders when it tries to get default state, it will create binary files using python and place them where the other theme files are. Helpful? For sure. It made what I was trying to do way easier, but I was surprised it took this route.

Claude Model

Opus

Relevant Conversation

Impact

Low - Minor inconvenience

Claude Code Version

2.1.34

Platform

Anthropic API

Additional Context

_No response_