CLAUDE should be smart enough to not run "rm -rf ~/" or "rm -rf /"