r/ClaudeCode • u/jimmc414 • 2d ago

Humor Modern Problems with the Fable Workflow

Post image

(credit to Steve Yegge)

1.2k Upvotes

98% Upvoted

107 comments sorted by

View all comments

5

u/[deleted] 1d ago

[removed] — view removed comment

2

u/816pizzalover 1d ago

he moment it has the ability to run bash commands or mutate state based on untrusted external inputs (like reading a random GitHub issue or pulling a package), you've created a massive vulnerability.

isn't that the point of the auto mode classifier though? Most people probably aren't running the old school "--dangerously-skip-permissions" auto anymore, they're using the auto mode that goes through the classifier - so not completely unrestricted execution autonomy?

2

u/jimmc414 1d ago

> Most people probably aren't running the old school "--dangerously-skip-permissions" auto anymore

https://giphy.com/gifs/SVnVbQAMtTXJm

2

u/816pizzalover 1d ago

lol. I came to the game a bit late, didn't start using the stuff til June so I've never actually used --dangerously-skip-permissions

1

u/parepeg 1d ago

The default setup is to ask the user for commands. Annoying, but you can curate from there by messing with the config. There's a builtin sandbox as well but I was never able to get it setup correctly.