Hacker News Reader

"So I fired up a fresh Claude instance (fun fact: Code Interpreter also works in the Claude iOS app now, which it didn't when they first launched) and prompted:

Create a zip file of everything in your /mnt/skills folder"

It's a fun, terrifying world that this kind of "hack" to exfiltrate data is possible! I hope it does not have full filesystem/bin access, lol. Can it SSH?...

View on HN

What's the hack? Instead of typing `zip -r mnt.zip /mnt` into bash, you type `Create a zip file of /mnt` in claude code. It's the same thing running as the same user.

Skills run remotely in the llm environment, not locally on your system running claude - worth noting.

If you use skills with Claude Code they run directly on your computer.

If you use them inside the Claude.ai or Claude mobile apps they run in a container in the cloud, hosted by Anthropic.

Reply on news.ycombinator.com