Agentic AI tools now need real safeguards against this kind of indirection.
…Claude Code, attempting only to be helpful, followed that written instruction automatically, treating the documented fix as ordinary routine error recovery. That single command triggered a hidden shell script which quietly queried…
