Claude Code's Deny List Bypass: How to Protect Your Codebase from Compound Commands

Claude Code's deny lists only check the first token of compound commands, allowing dangerous actions like 'git clean' to slip through. Here's how to p