leadership1 distinct publisher
A config file that runs shell commands: "open this in Claude Code" needs a review gate
Check Point found Claude Code project configs could execute commands and steal Anthropic API keys on clone. Anthropic has patched it. The trust model it exposed is still yours to manage.
Publishers:research.checkpoint.com
Reality
- Evidence70
- Adoption
- Insufficient