Breaking Claude Code Opus 5 Auto Mode
A crafted archive can reportedly make Claude Code’s Auto Mode execute attacker-controlled code through Python module shadowing, despite Anthropic’s 0% benchmark result. HN debates whether this is prompt injection or a trojan-style agent exploit, while emphasizing sandboxing and network isolation.