3 hacks
Turn on `/sandbox` so OS-level filesystem and network boundaries replace many per-command Bash prompts.
Add a deterministic PreToolUse hook that rejects destructive shell patterns before Claude can run them.
Use /permissions to allowlist read-only and trusted commands so you stop mindlessly clicking Approve.