News for hackers. Stuff that matters.

A comment on Claude Skills are awesome, maybe a bigger deal than MCP. Parent comment

Re:Claude Skills are awesome, maybe a bigger deal than MCP by carlgreene on Friday October 17, 2025 @08:09PM (#45623593)
I’m curious some of the things you’re having the LLM/agents do with a full Linux sandbox that you wouldn’t allow on your local machine
[ Parent | on HN ]
Re:Claude Skills are awesome, maybe a bigger deal than MCP by simonw on Friday October 17, 2025 @08:28PM (#45623714)
I remain afraid of prompt injection. If I'm telling Claude Code to retrieve data from issues in public repos there's a risk someone might have left a comment that causes it to steal API keys or delete files or similar.

I'm also worried about Claude Code making a mistake and doing something like deleting stuff that I didn't want deleted from folders outside of my direct project.

[ Parent | on HN ]