Claude Agent SDK 0.2.158 adds verbatim_prompts to stop untrusted text triggering @path reads and slash commands
GitHub (anthropics/claude-agent-sdk-python)·medium signal
The Python SDK release on 23 September adds ClaudeAgentOptions.verbatim_prompts, default False. When True, user messages reach the CLI exactly as written, with no @path file expansion and no slash-command dispatch. It works with query(), ClaudeSDKClient.connect() and ClaudeSDKClient.query(), and needs CLI 2.1.248+. Anyone who inlines emails, tickets or web content into SDK prompts should turn it on, because without it that text can trigger file reads or commands.