[FEATURE] Dangerously skip allow permissions but continue to respect `permissions.deny`

Status Closed — not planned
Maintainer reply None cached
Activity 10 comments · opened Sep 5, 2025 · closed Jan 11, 2026

Preflight Checklist

  • [x] I have searched existing requests and this feature hasn't been requested yet
  • [x] This is a single feature request (not multiple features)

Problem Statement

I want to be able to run Claude Code with --dangerously-skip-permissions but ONLY for allowed and unknown permissions. I want CC to continue respecting my permissions.deny settings.

The rationale is that I know what is of utmost danger to my machine, and I've already put those commands under permissions.deny.

Proposed Solution

Provide another mode that respects permissions.deny but which ignores all other commands.

Priority

High - Significant impact on productivity

Feature Category

Configuration and settings

View original on GitHub ↗

10 Comments

derrekcoleman · 10 months ago

This is exactly how I wish dangeously-skip worked. Stay away from git push, you slippery snake!

github-actions[bot] · 8 months ago

This issue has been inactive for 30 days. If the issue is still occurring, please comment to let us know. Otherwise, this issue will be automatically closed in 30 days for housekeeping purposes.

PaulRBerg · 8 months ago

Claude is deleting people's home directories.

Can you please implement this feature, Anthropic? 🙏

github-actions[bot] · 7 months ago

This issue has been automatically closed due to 60 days of inactivity. If you're still experiencing this issue, please open a new issue with updated information.

PaulRBerg · 7 months ago

Please reopen, this is important for security!

rajatkaush1k · 7 months ago

I agree, this is how I'd like dangerously-skip-permissions to work too!

rafpaf · 7 months ago

You can combine --dangerously-skip-permissions with --disallowedTools:

claude --dangerously-skip-permissions --disallowedTools 'Bash(git push:*),Bash(git reset:*),Bash(git checkout:*),Bash(git branch -d:*),Bash(git branch -D:*),Bash(git stash:*),Bash(rm:*),Bash(mv:*),Bash(cp:*),Bash(chmod:*),Bash(chown:*),Bash(sudo:*),Bash(gh pr create:*),Bash(gh pr merge:*),Bash(gh pr close:*),Bash(gh issue create:*),Bash(gh issue close:*),Bash(gh repo:*)'
[!WARNING] This list is not exhaustive. But it's safer than claude --dangerously-skip-permissions.

Alas, once you call claude like this, you cannot give it permission to call any of the disallowed tools. I wish this were possible:

claude --dangerously-skip-permissions --requirePermissionsFor 'Bash(git push:*)' # Currently not supported
genesiscz · 7 months ago
Please reopen, this is important for security! I agree, this is how I'd like dangerously-skip-permissions to work too! This is exactly how I wish dangeously-skip worked. Stay away from git push, you slippery snake!

It currenly works that way. You just set ~/.claude/settings.json -> permissions.deny: [ "Bash(rm: *)" ]

<img width="515" height="384" alt="Image" src="https://github.com/user-attachments/assets/a2164d4f-06f0-421f-af2f-fb262595c393" />

PaulRBerg · 7 months ago

oh that's good to know thx @genesiscz!

github-actions[bot] · 7 months ago

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.