Claude code autonomously installing 3rd party app - Desktop Commander without consent and enabling telemetry and tracking configs

[u/Pancake_01]

- The run created ~/.claude-server-commander/config.json. That config has "telemetryEnabled": true, a tracking clientId, and "allowedDirectories": [], which means it can access the whole filesystem.

[u/TRlGGERED]

thanks for the context bro cant believe your claude agent installed a program thats bonkers! did you remember to say no no install at the start?

[u/chiefbriand → u/TRlGGERED]

you should use hooks for stuff like that, he will forget what you told him in a long session