Hacker News Reader

I accidentally leaked the existence of these last Friday, glad they officially exist now! https://simonwillison.net/2025/Oct/10/claude-skills/

View on HN

"So I fired up a fresh Claude instance (fun fact: Code Interpreter also works in the Claude iOS app now, which it didn't when they first launched) and prompted:

Create a zip file of everything in your /mnt/skills folder"

It's a fun, terrifying world that this kind of "hack" to exfiltrate data is possible! I hope it does not have full filesystem/bin access, lol. Can it SSH?...

What's the hack? Instead of typing `zip -r mnt.zip /mnt` into bash, you type `Create a zip file of /mnt` in claude code. It's the same thing running as the same user.

Skills run remotely in the llm environment, not locally on your system running claude - worth noting.

If you use skills with Claude Code they run directly on your computer.

If you use them inside the Claude.ai or Claude mobile apps they run in a container in the cloud, hosted by Anthropic.

Woah, Jesse's blog has really come alive lately. Thanks for highlighting this post.

Discussed here btw:

Superpowers: How I'm using coding agents in October 2025 - https://news.ycombinator.com/item?id=45547344 - Oct 2025 (231 comments)

Reply on news.ycombinator.com