Drew Breunig(@dbreunig):TIL Claude Code allows Skills to run commands to inject content. This behavior is enabled by default, runs silently, & doesn't require user approval. There are some guardrails, but I was able to inject a .env file with no complaints! 🤯 drskill has been updated to guard against this avenue of exploits:

Drew Breunig

@dbreunig

Writing about and working on AI, DSPy, geo, and data.

가입 March 2008

1.2K 팔로잉 중 9.5K 팬

Drew Breunig@dbreunig

2026.08.05 14:11

TIL Claude Code allows Skills to run commands to inject content. This behavior is enabled by default, runs silently, & doesn't require user approval. There are some guardrails, but I was able to inject a .env file with no complaints! 🤯 drskill has been updated to guard against this avenue of exploits: