The Invisible Execute: How Claude Code’s Advanced Skill Patterns Become Blind Spots
When we teach an AI to code, we expect it to see everything it’s doing. That assumption breaks down in Claude Code’s skills system, where shell commands exfiltrate credentials before the AI receives a single token, and hooks silently surveil every tool call the AI makes. In both cases, the AI has no idea any of it is happening.
Matan Levi, PhD
Security
