Claude Code sometimes pauses for approval before running commands I expect to be harmless, such as checking repository status or searching through files. Is that because the command is treated as a general shell action, or can Claude Code distinguish read-only shell commands from commands that change the project?

I’m trying to make the permission prompts less disruptive without granting broad access. If you’ve tuned this for a team or a personal setup, which settings or practices helped?