Checked fact 100210 Oct 2026Safety and security
Claude Code's security documentation says: "Commands that fetch content from the web such as curl and wget are not auto-approved by default."
The exact words it rests on
Commands that fetch content from the web such as curl and wget are not auto-approved by default.
What the source said when we opened it, on 10 Oct 2026.
The source
Security - Claude Code Docs
Checked
Checked by the notis newsroom on , against the source above.
In the story
How prompt injection works and how to limit the damage 10 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.