claude-cli

BENIGN in purpose alignment but security-relevant in operation: it coherently wraps the official local Claude CLI, yet it deliberately grants a child agent broad autonomous action via `--dangerously-skip-permissions`. Main risk is approval bypass and delegated write execution, not malware or hidden exfiltration.