From 569cf13439638ffa8d25fc566011abe2a50623ba Mon Sep 17 00:00:00 2001 From: Ryota Ikezawa Date: Fri, 20 Feb 2026 01:40:52 +0900 Subject: [PATCH] fix(claude): restore granular rm deny rules and adjust plugin settings - Revert blanket `Bash(rm:*)` deny to specific dangerous path patterns - Restore code-simplifier and ralph-loop plugins - Add swift-lsp as false for project-level override discoverability Co-Authored-By: Claude Opus 4.6 --- dot_claude/settings.json.tmpl | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/dot_claude/settings.json.tmpl b/dot_claude/settings.json.tmpl index b1b2767..ad4ab92 100644 --- a/dot_claude/settings.json.tmpl +++ b/dot_claude/settings.json.tmpl @@ -3,7 +3,11 @@ "allow": [], "deny": [ "Bash(sudo:*)", - "Bash(rm:*)", + "Bash(rm -rf /:*)", + "Bash(rm -rf /*:*)", + "Bash(rm -rf ~:*)", + "Bash(rm -rf .:*)", + "Bash(rm -rf ..:*)", "Bash(chmod 777:*)", "Bash(chown:*)", "Bash(shutdown:*)", @@ -61,7 +65,10 @@ "pr-review-toolkit@claude-plugins-official": true, "ralph-wiggum@claude-plugins-official": true, "document-skills@anthropic-agent-skills": true, - "example-skills@anthropic-agent-skills": true + "example-skills@anthropic-agent-skills": true, + "code-simplifier@claude-plugins-official": true, + "ralph-loop@claude-plugins-official": true, + "swift-lsp@claude-plugins-official": false }, "alwaysThinkingEnabled": true }