Claude Code Project Settings Indicate Hooks Or MCP Auto Approval

Detects suspicious Claude Code configuration keys linked to automatic hook execution or automatic MCP server enabling, which were used to bypass consent and execute commands.