🎯 GhostApproval

The items that name it 5

• Is Claude Code safe for the enterprise? What the official settings cover, and what they don't
  articleas classification.key entities2026-10-22
• Top 10 attacks on Claude Code and what each one actually broke
  writeupas techniques2026-09-23It is written here as GhostApproval (deceptive approval UI).

  The agent's internal reasoning correctly identifies a sensitive target file (e.g., a zsh config file) but the approval prompt shown to the user names a different, innocuous file (e.g., project_settings.json), so user consent is based on false information.

• Top AI Coding Agent security resources — August 2026
  articleas classification.key entities2026-08-03
• Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)
  articleas techniques2026-07-09It is written here as GhostApproval (AI agent symlink deception).

  A repo file with a friendly name (e.g. project_settings.json) is actually a symlink to a sensitive file (e.g. ~/.ssh/authorized_keys or ~/.zshrc); README instructions written for the AI agent tell it to write attacker content into that filename, and the agent follows the symlink, writing to the real

• GhostApproval: A Trust Boundary Gap in AI Coding Assistants
  writeupas classification.key entities2026-07-08