Mostly good advice other than "Run Ad-Hoc Claude Commands Inside Scripts"

I barely trust Claude Code as it is, and neither should anyone to run arbitrary commands unless you run it in a strong sandbox.

I've used Claude Code daily since it came out. These are the best practices, tools, and configuration patterns that I learned. Most of this applies to other coding agents (Codex, Gemini CLI) too.