Comment on Agentjacking: Fake error reports hijack Claude Code and Cursor into running codeComments−nryooOP2moThe root problem is that coding agents treat tool output as trusted context.
Comments
The root problem is that coding agents treat tool output as trusted context.