On: Which tools do Claude, Codex and Cursor choose? We measured 17k runs to find out

[albrewer]

I have a hook that auto-denies when it sees 'python -c "', ' awk ', ' sed ', and '&&'

[IgorPartola → albrewer]

It can still invoke them in subagents and does this.

[mavamaarten → albrewer]

And find --exec too.