So just wanted to clarify a thing.
When you use #Claude code on a unix system (like MacOS), when you run Claude in the terminal it inherits the permissions of your user. This doesn’t mean you’re giving it root access to your machine, but its Bash tool spawns shell commands under your account. So, for example, $whoami would return your username, and it inherits your file access, environment, and credentials (SSH keys, git config, etc.).
I’ve started thinking I’m not super happy about that and am experimenting with running cc as a separate standard user so the wholesome goodness of Unix security can keep my stuff a bit safer…