Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Claude Code creator Boris Cherny wrote about "what roles might look like in the future," from the "builder" to the "sweeper" ...