Claude Cowork 'Allow All Browser Actions' Permission Security Concerns and Proposed Fixes

A user on r/ClaudeAI has raised significant security concerns about the 'Allow all' button in Claude Cowork's browser action permissions. The post describes how repeated permission prompts can lead users to click this button for convenience, but it grants Claude permanent, unrestricted browser access across all future sessions.

The Security Problem

According to the source, once 'Allow all' is clicked, there's 'no visibility, boundaries, expiration or scope limitation.' This turns a UX annoyance into 'an invisible, permanent attack surface for prompt injection and other unpredictable behavior.' The user emphasizes that the scope of this permission is 'impossible for the user to properly gauge, understand and think through' at the moment of clicking.

Proposed Solutions

The post suggests making permissions scoped by default with these specific alternatives:

• Session-scoped (default): Allow all browser actions for this session only. This offers the same convenience but expires automatically, giving users better understanding of the scope.
• Skill-scoped: Browser access only while a specific skill is active. This ties permission to intent rather than providing a blank check. The suggestion includes opening one approval box when a skill asks for permissions so users can determine relevance in the current context.
• Persistent (current behavior): Keep as advanced, last-resort opt-in with a clear warning about what 'all websites, all sessions, no expiration' actually means. The user suggests this should never be allowed.

The post also includes a bonus idea: 'Maintain a list of trusted sites that can be accessed without asking for permission.'

Rationale

The user argues that 'preventing repeated permission clicks is absolutely useful - but user shouldn't have to trade permanent security exposure for basic workflow comfort.' They note that click fatigue creates its own risks as users might 'just allow everything to get rid of those damn requesters.'