YOLO Mode: Hidden Risks in Claude Code Permissions | UpGuard

**Executive summary:** Analysis of 18,470 publicly exposed Claude Code settings.local.json files shows many developers granted overly broad 'allow' permissions (e.g., Bash(curl:*), Bash(python:*), Bash(rm:*), git push) that could enable prompt-injection attacks to escalate to remote code execution, data exfiltration, destructive file deletion, and automated supply-chain propagation across GitHub; the report recommends using deny/ask rules and periodic permission reviews to mitigate these risks.