Claude Code with --dangerously-skip-permissions is a real attack surface. Lasso published research + an open-source defender worth knowing about.