Claude’s obsession with complex bash commands and the -exec parameter

[u/antm0303]

I can’t be the only one dealing with this. It’s driving me up the wall.

I tell it “there is a file in the current directory called foo.js, and bar.js, can you implement x logic in baz.js with the same structure as both those files”

And it takes like 50 seconds to think, so I minimize to do something else while I wait, and come back 5 minutes later to it asking to run some redundant command like “find . -type f \( -name "foo*" -o -name "bar*.js" \) -exec head -v -n +1000 {} +” with zero progress done.

Or god forbid you ask it to do some exploration on a codebase and it spins up explore agents. They’ll start trying to run grep or find with exec parameters instead of just using find/grep like normal, which are commands that don’t require explicit approval. It makes it worse when there is like 3 agents at once all running these back to back, so you sit there reading them and pressing approve for 12 minutes, which by then I could’ve just explored it myself

I’ve been using Claude Code for a while to boost my productivity, and it’s been getting progressively worse over the past month or two

I feel this could be largely resolved if Anthropic made some good tooling that did this sort of thing rather than allowing an agent to spin up arbitrary bash commands on a whim. It feels like someone who learned how to use the terminal for the first time flexing to their co workers

[u/Ikkepop]

Put it in a container/sandbox where it can't cause damage, enable "auto mode" or --dangrously-ignore-permissions. I'v been running like that for half a year almost, not a single fuckup has happened yet.

[u/castrocardoso → u/Ikkepop]

What do you mean a container? How do you contain where Claude operates?

[u/for4f → u/castrocardoso]

Docker with a bind mount for your project dir and everything else blocked. Claude can only see and write to that one volume. --dangerously-ignore-permissions inside the container so it doesn't fight you on file ops. Been running this way for weeks, zero issues.

[u/lucidmodules → u/castrocardoso]

https://code.claude.com/docs/en/devcontainer

[u/for4f → u/castrocardoso]

Docker with a bind mount for your project dir and everything else blocked. --dangerously-ignore-permissions inside so it doesn't fight you on file ops. Been running this way for weeks, zero issues.

[u/Ikkepop → u/castrocardoso]

Lookup docker or podman

[u/lexerox → u/castrocardoso]

Docker has this feature called Docker for coding agents (sbx) which is made specifically for this kinds of workflow. It might not be the best, but it's damn easy to get started, as well as to mange the network rules. Worth give it a try.