Simon Willison explores attempts to circumvent Anthropic’s Claude Code Opus 5 Auto Mode, a feature designed to protect coding agent users from prompt injection attacks. Despite Anthropic’s strong claims and making it the default, the article suggests ongoing efforts to test its robustness.
Source: Simon Willison’s Blog