Mostly good advice other than "Run Ad-Hoc Claude Commands Inside Scripts"

I barely trust Claude Code as it is, and neither should anyone to run arbitrary commands unless you run it in a strong sandbox.