4 ms·
I accidentally leaked the existence of these last Friday, glad they officially exist now! https://simonwillison.net/2025/Oct/10/claude-skills/ https://simonwill
by simonw 1y ago
I accidentally leaked the existence of these last Friday, glad they officially exist now! https://simonwillison.net/2025/Oct/10/claude-skills/ https://simonwillison.net/2025/Oct/10/claude-skills/
- buildbot 1y ago"So I fired up a fresh Claude instance (fun fact: Code Interpreter also works in the Claude iOS app now, which it didn't when they first launched) and prompted: Create a zip file of everything in your /mnt/skills folder" It's a fun, terrifying world that this kind of "hack" to exfiltrate data is possible! I hope it does not have full filesystem/bin access, lol. Can it SSH?...
- antiloper 1y agoWhat's the hack? Instead of typing `zip -r mnt.zip /mnt` into bash, you type `Create a zip file of /mnt` in claude code. It's the same thing running as the same user.
- tgtweak 1y agoSkills run remotely in the llm environment, not locally on your system running claude - worth noting.
- simonw 1y agoIf you use skills with Claude Code they run directly on your computer. If you use them inside the Claude.ai or Claude mobile apps they run in a container in the cloud, hosted by Anthropic.
- skylurk 1y agoWoah, Jesse's blog has really come alive lately. Thanks for highlighting this post.
- dang 1y agoDiscussed here btw: Superpowers: How I'm using coding agents in October 2025 - https://news.ycombinator.com/item?id=45547344 https://news.ycombinator.com/item?id=45547344 - Oct 2025 (231 comments)