[BUG] disable Yes, I trust this folder prompt

[baleti]

What's Wrong?

Accessing workspace:

/home/user

Quick safety check: Is this a project you created or one you trust? (Like your own code, a well-known open source project, or work from your team). If not, take a moment to review what's in this folder first.

Claude Code'll be able to read, edit, and execute files here.

Security guide

❯ 1. Yes, I trust this folder
2. No, exit

Enter to confirm · Esc to cancel

What Should Happen?

PLEASE GET RID OF IT OR DOCUMENT PROPERLY HOW TO DISABLE IT!!!

[github-actions]

Found 3 possible duplicate issues:

1. Feature Request: Add trustedDirectories setting to auto-trust directories at startup #12737
2. [FEATURE] Trusted workspace patterns to skip trust prompt for git worktrees #23109
3. [Feature Request] Add trusted folder allowlist to skip permission prompts on session start #20629

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[yurukusa]

A Notification hook on start combined with a PreToolUse auto-approve can bypass the trust prompt:

INPUT=$(cat)
TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty')
TRUSTED_DIRS=(
    "$HOME/projects"
    "$HOME/work"
    "$HOME/repos"
)
CWD=$(pwd)
for dir in "${TRUSTED_DIRS[@]}"; do
    if [[ "$CWD" == "$dir"* ]]; then
        echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow","permissionDecisionReason":"Trusted directory"}}'
        exit 0
    fi
done
exit 0

Add to global ~/.claude/settings.json:

{
  "hooks": {
    "PreToolUse": [{
      "matcher": "",
      "hooks": [{ "type": "command", "command": "bash ~/.claude/hooks/auto-trust-folder.sh" }]
    }]
  }
}

This gives you per-directory trust control without disabling the security prompt globally.

[github-actions]

Closing for now — inactive for too long. Please open a new issue if this is still relevant.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.