#managed-settings

allowUnsandboxedCommands: false does not cover the ! shell-mode prompt (2026)

Claude Code v2.1.260 narrowed strict sandbox mode so it no longer covers commands you type at the ! prompt. Anthropic documents two exceptions the changelog never mentions, and the variable that closes the gap is filed under credential scrubbing.