Claude Code's Allowlist Has a Blind Spot

The permission system blocks && chaining but completely ignores command substitution. Here's what I found.