claude condom gives you protection on claude YOLO mode

https://github.com/nikvdp/cco

By default can still read anything, including all secrets in .env files, kubernetes credentials etc