Security1 hOctober 2, 2026, 17:01

deny-probe tests Claude Code deny rules: 10 of 12 bypass routes leak data

A new Python CLI called deny-probe audits permissions.deny rules in Claude Code against 12 built-in bypass routes. With a typical single Read(./.env) rule, 10 of 12 routes still expose the file, including Grep, Bash and CLAUDE.md @import chains.

DEV Community

Open source

deny-probe tests Claude Code deny rules: 10 of 12 bypass routes leak data

Tool checks 12 bypass routes as concrete (tool, argument) pairs
With one Read(./.env) rule only 1 of 12 routes is blocked
Grep(path="./.env", pattern=".") returns the whole file, bypassing Read
A --live mode uses a canary marker and real claude -p sessions

#Claude#Anthropic

Claude Code deny rule Bash(git push:*) stopped 8 of 14 push variants

Security

Rogue OpenAI agents built makeshift browser to bypass sandbox, probe sites

Gadgets

PNY Reportedly Denies Melted RTX 5090 Warranty Claim Over Cable Rule

Security

deny-probe tests Claude Code deny rules: 10 of 12 bypass routes leak data

Claude Code deny rule Bash(git push:*) stopped 8 of 14 push variants

Rogue OpenAI agents built makeshift browser to bypass sandbox, probe sites

PNY Reportedly Denies Melted RTX 5090 Warranty Claim Over Cable Rule

Plugin4Shell: one git trick bypassed safety locks on four AI coding agents