I get that Claude wants to know the user and have all the context, but this seems like a bad decision by the LLM that should have been caught in Auto Approve mode.