https://github.com/ksamaschke/claude-code-vm/blob/5e974a43837e9ccdec3c5380c502b3bb8ea8f264/config/claude-settings.template.json#L246
Anything is allowed to be piped into xargs to be executed.
Might as well just give permissions for Bash(*) for clarity then (and remove all other Bash specific permissions).