Topic

Claude Code

Reporting and analysis related to Claude Code.

Articles: 8
Desks: 2

Data graphic: a CVSS 4.0 score of 8.5 High for GHSA-v234-4jrq-mgg6, a Claude Desktop Cowork flaw on macOS that runs commands when a file is opened. The path runs from an injected agent writing a file, to the Cowork shared folder, to the user opening it in Claude Desktop, to commands running on the Mac. Affected >= 1.1.3918 and < 1.15962.0, fixed in 1.15962.0, CWE-184.

Claude Desktop Cowork Folder Flaw Let a File Run Commands on macOS

Anthropic fixed a Claude Desktop macOS flaw where a file an injected agent left in a Cowork folder could run commands when opened. Fixed in 1.15962.0.

Oct 2 · 4 min

Data graphic: Claude Code v2.1.287 turned mods on by default. A hub diagram shows a mod with unsandboxed access to files, secrets, prompts and network, approving tool calls before you are asked and spawning processes outside the sandbox. Mods install from any plugin marketplace, the org control is allowManagedModsOnly, and the community catalog lists 45 mods.

elevatedAI Security Claude Code

Claude Code Mods Are On by Default, and They Run Unsandboxed With Your Permissions

Claude Code 2.1.287 turns on mods by default: unsandboxed plugins that can read secrets and approve tool calls before you are asked. How to lock them down.

Oct 2 · 8 min

Data graphic: Agents pushed it public. AI coding agents hosting pull request screenshots in public GitHub repos exposed 13,000+ internal images across 300+ organizations and 900+ repositories, with 93% under employees' personal accounts.

elevatedAI Security Claude Code

PixelLeak: AI Coding Agents Pushed 13,000 Internal Screenshots to Public GitHub Repos

Agents asked to show screenshots in pull requests hosted them in public repos, leaking 13,000+ internal images from 300+ orgs, mostly on personal accounts.

Oct 2 · 7 min

Data graphic: Plugin4Shell, pin bypassed. 2/4 agents patched: Claude Code patched in 2.1.179 and OpenAI Codex in 0.146.0; GitHub Copilot has no patch shipped and Gemini CLI won't be fixed.

highAI Security Claude Code

Plugin4Shell: A Pinned Commit SHA Didn't Stop Repo Owners Swapping Plugin Code in Claude Code, Codex, Copilot and Gemini CLI

A branch named after a pinned commit SHA let plugin repo owners swap code in four AI coding agents. Claude Code and Codex are fixed; Copilot and Gemini CLI are not.

Oct 2 · 6 min

watchResearch Claude Code

Claude Code vs Codex CLI vs Antigravity CLI vs OpenCode: Coding Agents Compared (2026)

Gemini CLI is gone for consumer plans. We compare Claude Code, Codex CLI, Google's agy and OpenCode on price, models, license, sandboxing and MCP.

Sep 24 · 15 min

Data graphic: Claude Pro vs Max. Pro $20 / mo; Max 5x $100 / mo; Max 20x $200 / mo; Opus 5.5 API $4 / $20; Weekly cap +25%; One shared pool Chat + Code

watchResearch Claude Code

Claude Pro vs Max for Claude Code: Is $20 Enough After Opus 5.5?

Opus 5.5 is now Claude Code's default on Pro. What a $20 plan's 5-hour window really covers, where it runs dry, and when Max 5x or 20x pays off.

Sep 24 · 15 min

watchResearch Claude Code

Claude Code Pricing & Token Economics: Subscription vs. Pay-As-You-Go API

Claude Code CLI burns 400k to 2.5M tokens per task. We analyze subscription tiers (Pro, Max 5x, Max 20x) vs direct API pricing with prompt caching.

Sep 19 · 9 min

ThreatFrontier poster showing Claude Code internals as a local agent runtime with tools permissions sessions and SDK

watchAI Security Claude Code

How Claude Code Works Internally: From CLI Startup to Agentic Tool Execution

A practical systems-level explanation of Claude Code as a local agent runtime, covering startup, authentication, tools, permissions, sessions, MCP, plugins, and the Agent SDK.

May 20 · 13 min