Unverified50% confidenceCautionExact time
Any guard that inspects command arguments as strings before shell execution can only see the user's original spelling, not the set of files the shell will actually access.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedShell glob expansion is completed before command execution, so programs like sed see the expanded real paths rather than the original strings containing wildcards.67% similarUnverifiedArguments of commands judged to be read-only (such as rg or git grep) could still be shell-expanded into wildcards causing privilege escalation; this update causes these commands to trigger approval prompts again.64% similarUnverifiedWhen entering /loop without any content, it reads loop.md or a built-in default prompt.62% similarUnverifiedIn auto mode, a one-time prompt will appear before reading files outside the working directory for the first time, and users can block such reads via permissions.blockReadsOutsideWorkingDirectories.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1000602API
curl https://kongchang.com/api/v1/knowledge/claims/1000602MCP
get_claim(id=1000602)