claude-code - 💡(How to fix) Fix [Bug] Auto mode allows deletion of critical system directories without safety validation [1 comments, 2 participants]

TL;DR

The auto mode in the classifier-layer should be configured to hard-block commands that delete credential directories like ~/.ssh to prevent accidental deletion of sensitive files.

Guidance

• Review the classifier-layer configuration to ensure it correctly implements hard-block rules for credential directories.
• Verify that the defaultMode: auto setting is not overriding the intended hard-block behavior for sensitive commands like rm -rf ~/.ssh.
• Check the Sonnet 4.6 classifier approval process to understand why it accepted the deletion command despite the expected hard-block rule.
• Consider adding explicit deny rules for commands that target credential directories to provide an additional layer of protection.

Example

No code snippet is provided as the issue does not contain sufficient technical details to generate a relevant example.

Notes

The provided information suggests a configuration or logic issue within the classifier-layer or its interaction with the Sonnet 4.6 classifier. Without more details on the classifier-layer's configuration or the approval process, it's challenging to provide a definitive fix.

Recommendation

Apply a workaround by adding explicit deny rules for commands that target credential directories, as this provides a clear and immediate way to prevent similar incidents until the root cause of the classifier-layer's behavior can be fully understood and addressed.