Claude can run whatever commands it wants and the only harm it can do is nuke its own home directory. That's the whole point.