yamanin/registry
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add security notice for --dangerously-skip-permissions in Claude module (#116)

Browse Source 
Let's be upfront about how our module works so operators/template
authors can evaluate the security implications.

Signed-off-by: Danny Kopping <dannykopping@gmail.com>
This commit is contained in:
Danny Kopping 2025-05-23 11:43:03 +02:00 committed by GitHub
parent b1a1103f7e
commit 5a3ade7cd4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
registry/coder/modules/claude-code/README.md
View File

@ -22,6 +22,11 @@ module "claude-code" {
} }
``` ```
> **Security Notice**: This module uses the [`--dangerously-skip-permissions`](https://docs.anthropic.com/en/docs/claude-code/cli-usage#cli-flags) flag when running Claude Code. This flag
> bypasses standard permission checks and allows Claude Code broader access to your system than normally permitted. While
> this enables more functionality, it also means Claude Code can potentially execute commands with the same privileges as
> the user running it. Use this module _only_ in trusted environments and be aware of the security implications.
## Prerequisites ## Prerequisites
- Node.js and npm must be installed in your workspace to install Claude Code - Node.js and npm must be installed in your workspace to install Claude Code