2 ms·
"So I fired up a fresh Claude instance (fun fact: Code Interpreter also works in the Claude iOS app now, which it didn't when they first launched) and prompted:
by buildbot 1y ago
"So I fired up a fresh Claude instance (fun fact: Code Interpreter also works in the Claude iOS app now, which it didn't when they first launched) and prompted:
Create a zip file of everything in your /mnt/skills folder"
It's a fun, terrifying world that this kind of "hack" to exfiltrate data is possible! I hope it does not have full filesystem/bin access, lol. Can it SSH?...
- antiloper 1y agoWhat's the hack? Instead of typing `zip -r mnt.zip /mnt` into bash, you type `Create a zip file of /mnt` in claude code. It's the same thing running as the same user.
- tgtweak 1y agoSkills run remotely in the llm environment, not locally on your system running claude - worth noting.
- simonw 1y agoIf you use skills with Claude Code they run directly on your computer. If you use them inside the Claude.ai or Claude mobile apps they run in a container in the cloud, hosted by Anthropic.