surshar / claude-code

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Built by Anthropic · github.com/anthropics

fix(security): Remove overly broad gh api permission from dedupe commandBrowse files

Remove `Bash(gh api:*)` from dedupe.md allowed-tools to prevent potential
secret exfiltration via prompt injection. The dedupe workflow only needs
gh issue view/list/comment and gh search commands - it doesn't require
raw API access.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Boris Cherny authored on Jan 7, 2026 parent 128de2a · commit 817e8c157388

1 changed file+1 -1compared with 128de2a

M.claude/commands/dedupe.md

M.claude/commands/dedupe.md+1 -1

		@@ -1,5 +1,5 @@
1	1	---
2		-allowed-tools: Bash(gh issue view:), Bash(gh search:), Bash(gh issue list:), Bash(gh api:), Bash(gh issue comment:*)
	2	+allowed-tools: Bash(gh issue view:), Bash(gh search:), Bash(gh issue list:), Bash(gh issue comment:)
3	3	description: Find duplicate GitHub issues
4	4	---
5	5