MCP-prompt-injection - The LGTM

The LGTM

Sign in Subscribe

MCP-prompt-injection

A collection of 6 posts

Claude Code 2.1.191 Fixes the Background-Agent Zombie Problem

Claude Code 2.1.191 Fixes the Background-Agent Zombie Problem

Claude Code 2.1.191 is a patch release, but the lead fix deserves a much louder headline: stopped background agents no longer resurrect. That is the kind of sentence that sounds funny until you remember that background agents are not browser tabs. They are delegated coding sessions with tools,

Copilot CLI GA Makes the Terminal an Agent Workbench, Not Just a Prompt Box

Copilot CLI GA Makes the Terminal an Agent Workbench, Not Just a Prompt Box

GitHub’s new Copilot CLI terminal interface is generally available, and the least interesting thing about it is that it has tabs. The interesting part is what those tabs imply: the terminal is becoming an agent workbench where GitHub context, MCP servers, skills, plugins, hooks, custom agents, approvals, and repo

Claude Code’s Prompt-Injection False Memory Bug Is How Safety Heuristics Become Superstitions

Claude Code’s Prompt-Injection False Memory Bug Is How Safety Heuristics Become Superstitions

Claude Code’s latest prompt-injection report is not alarming because the model saw hostile text. It is alarming because, according to the reporter, the model invented the hostile text, diagnosed it as a prompt injection, and then wrote that diagnosis into memory where future sessions could inherit it. That is

Claude Code 2.1.186 Tightens the Permission Story Around Background Agents and MCP

Claude Code 2.1.186 Tightens the Permission Story Around Background Agents and MCP

Claude Code 2.1.186 is not one big feature. It is a cluster of small operational fixes around the places coding agents stop being demos and start becoming systems: MCP authentication, background-agent permission prompts, named subagent policy enforcement, browser isolation, usage-based cost display, retry caps, and workflow loop termination.