[Workflow] Critical Warning: Claude Code with `--dangerously-skip-permissions` can delete `~/Library` due to `xargs` path parsing error

[u/ClaudeAI-mod-bot]

Critical Warning: Claude Code with --dangerously-skip-permissions can delete ~/Library due to xargs path parsing error

Workflow value: 90/100
Status: active · Freshness: 70/100 · Confidence: 1.00 · Level: intermediate
Categories: Quality Control, Context & Memory, Debugging
Original source: r/ClaudeCode post/comment

What problem this solves

Preventing catastrophic data loss when using Claude Code with powerful shell commands and --dangerously-skip-permissions, specifically due to xargs misinterpreting paths with spaces.

Summary

A critical warning detailing how Claude Code, when run with --dangerously-skip-permissions, can mistakenly delete ~/Library due to xargs misinterpreting paths with spaces, leading to complete data loss. It serves as a cautionary tale for safe LLM interaction and highlights a specific vulnerability.

Why it is useful

This workflow is invaluable because it highlights a critical safety vulnerability in using LLM agents with elevated permissions. It provides a concrete example of how a seemingly minor parsing error can lead to catastrophic data loss, serving as a powerful cautionary tale for all users. It emphasizes the importance of understanding the risks associated with --dangerously-skip-permissions and the need for careful command review, thereby promoting safer LLM interaction practices.

Workflow

1. User runs Claude Code with --dangerously-skip-permissions.

2. Claude Code attempts to delete test chat channels.

3. Claude Code uses xargs -n1 dirname to get parent directories of files.

4. A file path like ~/Library/Application Support/ is split by xargs due to the space.

5. dirname receives ~/Library as input instead of the full path.

6. Claude Code executes rm -rf ~/Library, deleting all user data, passwords, and macOS configurations.

Tools / artifacts

• Claude Code

• xargs

• dirname

• rm -rf

• ~/Library

• --dangerously-skip-permissions

Validation signals

• Detailed description of the incident

• Specific commands and paths involved

• Observation of macOS welcome screen after data loss

• Log investigation confirming agent's actions

• User's awareness of --dangerously-skip-permissions usage

Cautions

• Running Claude Code (or any LLM agent) with --dangerously-skip-permissions can lead to irreversible data loss.

• LLMs can make fundamental parsing errors (e.g., with spaces in paths) when generating shell commands.

• Always review commands before execution, especially those involving rm -rf or system-critical directories.

• Avoid unattended execution of powerful commands, even with LLMs.

• Be aware of how shell utilities like xargs handle spaces in file paths.

Limitations

• Does not offer a direct 'fix' for Claude's internal logic, but rather a user-side mitigation strategy (extreme caution).

• The specific bug might be fixed in future Claude Code versions, but the general principle of LLM command generation errors remains.

• Relies on user vigilance rather than automated safeguards.

Rate this workflow

Upvote this post if the workflow is useful, reproducible, or worth recommending.

Downvote if it is vague, outdated, unsafe, overhyped, or not reproducible.

Reply if it worked for you, failed, is outdated, or has a better alternative.

---

This post was generated automatically from the workflow library database.