Auto mode works really well with Safehouse [1]. I usually call Claude like this:

    safe() {
        safehouse --env --add-dirs="/tmp:~/.claude" "$@"
    }

    safeclaude() {
        safe claude --enable-auto-mode --permission-mode auto
    }

This way I will never fear Claude `rm -rf`-ing my home directory.

[1] https://agent-safehouse.dev/