TLDRocket
Sign in

Claude Code

81 summarised stories about Claude Code, each linking back to the original source. Browse all topics →

+ Follow this topic

Thursday, 27 August 2026

Breaking Claude Code Opus 5 Auto Mode

Simon Willison’s Weblog 1 month ago 11

Anthropic made Claude Code’s auto mode the default to help protect coding agents from prompt injection attacks, but prompt injection researcher Johann Rehberger reported an attack that works 80% of the time. The attack tricks Claude Code into downloading and uncompressing a zip archive, then executing code that imports base64 and ends up executing a local extracted file. As a result, the story argues that sandboxing with restricted access (e.g., container/VM, limited network egress, monitoring) is the safer way to run unattended agents.

Aider, Claude Code, and OpenClaw ran an identical model. Token use varied 70-fold.

The New Stack 1 month ago 8 ● 2 sources

A set of AI coding-agent benchmarking efforts found that using different harnesses with the same underlying model can cause very large differences in token usage and cost. One result showed token use per solved task ranging from about 3,500 for Aider (architect mode) to 292,000 for OpenClaw. The findings shift optimization toward harness prompt/context overhead and cache-hit behavior—so enterprises should measure cost per verified outcome rather than raw token counts.

The daily briefing

Every AI story that matters, in your inbox by 8am.

TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the day in two minutes. Follow companies and topics for alerts, or get the briefing in Slack. Free, no spam, unsubscribe anytime.