The Configuration

What Gets Auto-Approved (and Why)

Version Control & GitHub CLI

Python & Django

Node.js Tooling

Containers

Task Workers

File Operations

What’s Notably Absent

The Pros

The Cons

Best Practices

Conclusion If you've spent any real time with Claude Code, you know the rhythm: prompt → approve → prompt → approve → prompt → approve. Every shell command, every file edit, every tool call wants a thumbs-up. Secure by default, yes. But fifty approvals into a feature branch, the friction isn't keeping you safe — it's training you to click "yes" without reading. There's a better answer: .claude/settings.json. Pre-approve the command patterns that are safe, keep the destructive

ones gated, and let Claude actually work in the gaps you trust it in. Here's the exact config I use, what's in it, what's deliberately not in it, and the tradeoffs. This configuration auto-approves a curated set of shell commands. Let’s break down the reasoning, risks, and recommendations for each category. Commands: git *, gh * These are the backbone of any development workflow. Auto-approving them means Claude can check status, create branches, stage files, commit, and interact with GitHub issues and PRs without interruption. Consideration: git * is broad. It includes git push, git reset --hard, and git branch -D — commands that can alter remote state or destroy local work. If you’re working on a shared repository, a misconfigured push could affect your team. Claude Code is designed to confirm destructive git operations regardless, but the permission layer is your first line of defense. Recommendation: If you’re working solo on a feature branch, this is low risk. On shared repos with CI/CD pipelines, consider narrowing to specific subcommands like git status, git add, git commit, and git log. Commands: python3 *, python manage.py *, python3 manage.py *, pip *, pip3 * For Django projects, this is essential. Claude can run migrations, start the dev server, execute management commands, and install packages without friction. Consideration: python3 * is the broadest permission in this list. It allows Claude to execute any Python script or one-liner. While Claude Code operates with good intent and guardrails, this theoretically permits arbitrary code execution. The pip * permissions could install packages that modify your environment. Recommendation: In a virtual environment (which you should always use), pip changes are contained and reversible. The python3 * permission is a pragmatic choice for development speed — but be aware it’s essentially giving Claude full scripting access. If that concerns you, narrow it to python3 manage.py * only. Commands: npm *, npx * Standard for any project with JavaScript dependencies, build tools, or frontend assets. Consideration: npm install can run post-install scripts from third-party packages. npx downloads and executes packages on the fly. Both carry supply-chain risk in general — though in practice, Claude is running the same commands you would. Recommendation: Acceptable for most development workflows. If you’re security-conscious, audit your package.json scripts and consider using npm ci (clean install) for reproducible builds. Commands: docker *, docker-compose * Useful when your project runs services in containers — databases, Redis, background workers, etc. Consideration: Docker commands can start/stop containers, build images, and in some configurations access the host filesystem. docker run with volume mounts could theoretically read or write anywhere on your machine. Recommendation: Safe for standard development workflows (starting services, viewing logs, rebuilding images). Be cautious if your Docker setup involves privileged containers or host network access. For projects using Celery for background task processing. Consideration: Low risk. Primarily used to start workers, inspect queues, and purge tasks during development. Commands: ls *, cd *, cat *, mkdir *, cp *, mv *, source * Basic filesystem navigation and manipulation. Consideration: mv and cp can overwrite files without warning. source executes shell scripts in the current environment, which could modify environment variables or run arbitrary commands. Recommendation: These are generally safe for development. The source permission is worth noting — it’s typically used for activating virtual environments (source venv/bin/activate), but it could source any script. The configuration deliberately excludes several commands: These exclusions are intentional safety boundaries. When Claude needs to use any of these, you’ll get a confirmation prompt — giving you a chance to review exactly what’s being executed. Start restrictive, then expand. Begin with only the commands you find yourself approving repeatedly, then add patterns as needed. It’s easier to add permissions than to recover from an unintended action. Use project-level settings, not global. Keep permissions in .claude/settings.json within each project rather than in your global Claude Code config. Different projects have different risk profiles. Review the diff, not just the output. Even with auto-approved commands, always review what Claude has changed before committing. The git diff is your ground truth. Pair with virtual environments. Auto-approved pip and python3 commands are much safer inside a virtual environment, where changes are isolated and reversible. Never auto-approve destructive commands. Keep rm, sudo, curl, and remote access commands behind the confirmation prompt. The few seconds of friction are worth it. Claude Code’s permission system is a thoughtful balance between developer velocity and operational safety. The configuration shown here — auto-approving version control, language tooling, containers, and basic file operations while gating destructive commands — represents a practical middle ground for most development workflows. The key insight is that permissions should match your trust level and environment. A solo developer on a feature branch has different needs than a team working on production infrastructure. Configure accordingly, review regularly, and let Claude Code handle the repetitive work so you can focus on the interesting problems. At EchoForgeX, we build AI-powered tools and help businesses integrate AI into their workflows. Get in touch to learn how we can help your team work smarter with AI. Templates let you quickly answer FAQs or store snippets for re-use. Hide child comments as well For further actions, you may consider blocking this person and/or reporting abuse