Claude Code's 'rm -rf tests/ patches/ plan/ ~/' deletes a developer's home directory

What happened

Mike Wolak asked Claude Code to rebuild a project from a fresh checkout. It generated rm -rf with a trailing ~/ — which the shell expanded to his entire home directory. He was not running --dangerously-skip-permissions; the permission system checked the command before the shell expanded it. Filed as GitHub issue #10077, tagged as a security bug. Two days earlier Anthropic had launched sandboxing — as an opt-in.