Claude Code would execute hidden code from untrusted projects before any user confirmation, Check Point reports.