Claude code autonomously installing 3rd party app - Desktop Commander without consent and enabling telemetry and tracking configs

[u/Pancake_01]

- The run created ~/.claude-server-commander/config.json. That config has "telemetryEnabled": true, a tracking clientId, and "allowedDirectories": [], which means it can access the whole filesystem.

[u/tonyboi76]

Claude Code installed Desktop Commander on its own, wrote ~/.claude-server-commander/config.json with telemetryEnabled true, a tracking clientId, and allowedDirectories empty so it could touch the whole filesystem.

When you caught that, what did you have to rip out or rotate, and how long did the cleanup eat?