Module Shadowing and Local Import Risk

Claude Code writes its own decoder when you block the attacker's binary

Johann Rehberger got code execution in up to 80% of attempts by making one tool fail and letting the agent improvise. Anthropic says Auto Mode is working as designed, which leaves the sandbox decision on your desk.