[falloutx]

Still leaves you open for data exfil. Your AI goes to a site to check documentation, but oh no that site wants it to make an API call with a very specific token.

[9dev]

Claude will only ever ask if it is allowed to connect to the domain name, so if it got a malicious link from a web search, you’re SOL anyway.

[falloutx]

atleast you get one prompt, with --dangerously-skip-permissions you get no prompts