[Bug] Claude bypasses tool restrictions by using shell commands without disclosure

Bug Description
사용자 기만을 자연스럽게 하면서 기만한줄 모름. ./build.sh --check 같은 기능을 만들었고 사용하라고 지침을 적었기 때문에, 도구사용에 cargo check를 금지했더니, 금지된 이유를 궁금해하지않고, bash -c "cargo check"를 사용해서 사용자한테 말도 없이 우회하고 있었고, 모니터링 하지않았으면 발견하지 못할뻔함.

Environment Info

• Platform: win32
• Terminal: windows-terminal
• Version: 2.1.110
• Feedback ID: 21a6fd82-b202-4dab-ba04-ab985a4067f7

Errors

[{"error":"Error: LSP server plugin:rust-analyzer-lsp:rust-analyzer crashed with exit code 1\n    at <anonymous> (B:/~BUN/root/src/entrypoints/cli.js:3186:21284)\n    at emit (node:events:98:22)\n    at #handleOnExit (node:child_process:532:14)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-16T00:15:00.709Z"},{"error":"Error: LSP server plugin:rust-analyzer-lsp:rust-analyzer crashed with exit code 1\n    at <anonymous> (B:/~BUN/root/src/entrypoints/cli.js:3186:21284)\n    at emit (node:events:98:22)\n    at #handleOnExit (node:child_process:532:14)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-16T00:15:10.158Z"},{"error":"Error: LSP server plugin:rust-analyzer-lsp:rust-analyzer crashed with exit code 1\n    at <anonymous> (B:/~BUN/root/src/entrypoints/cli.js:3186:21284)\n    at emit (node:events:98:22)\n    at #handleOnExit (node:child_process:532:14)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-16T00:15:18.969Z"},{"error":"Error: LSP server plugin:rust-analyzer-lsp:rust-analyzer crashed with exit code 1\n    at <anonymous> (B:/~BUN/root/src/entrypoints/cli.js:3186:21284)\n    at emit (node:events:98:22)\n    at #handleOnExit (node:child_process:532:14)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-16T00:15:23.860Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at Y (B:/~BUN/root/src/entrypoints/cli.js:3186:24505)\n    at A (B:/~BUN/root/src/entrypoints/cli.js:3186:29737)\n    at Y (B:/~BUN/root/src/entrypoints/cli.js:3186:30074)\n    at O (B:/~BUN/root/src/entrypoints/cli.js:3186:30620)\n    at call (B:/~BUN/root/src/entrypoints/cli.js:4830:1371)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-16T00:15:38.560Z"},{"error":"Error: Failed to start LSP server for file C:\\Develop\\hana\\hana-gui-framework\\src\\shell\\slot.rs: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at A (B:/~BUN/root/src/entrypoints/cli.js:3186:29763)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-16T00:15:38.561Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at Y (B:/~BUN/root/src/entrypoints/cli.js:3186:24505)\n    at A (B:/~BUN/root/src/entrypoints/cli.js:3186:29737)\n    at Y (B:/~BUN/root/src/entrypoints/cli.js:3186:30074)\n    at O (B:/~BUN/root/src/entrypoints/cli.js:3186:30620)\n    at call (B:/~BUN/root/src/entrypoints/cli.js:4830:1371)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-16T00:15:38.561Z"}]