it's a wrapper around a model that actually executes commands from text input. Claude Code is an harness : the underlying model is Claude (with the version of your choice), Claude produce text output like `grep -in "error" server.log` , Claude Code actually execute the code in your shell and return the output to the model
In the olden days, this used to be called Command and Control malware and was indicative of a major security breach.