Comment by otterley

Claude Code is an agent. It will not call any tools or commands without your prior consent.

Edit: unless you pass it an override like --dangerously-skip-permissions, as this malware does. https://www.stepsecurity.io/blog/supply-chain-security-alert...