Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-08-21 · source-backed
An r/ClaudeAI post at 876 upvotes shows a subagent under Opus 5 emitting text the main session read as a delete instruction. The author clarified nothing was actually deleted, the main agent caught it. r/ClaudeAI The thread mostly personified the agent, which is the wrong read. The minority position is correct: subagent output is untrusted input to the parent, and essentially every orchestration setup I've seen, including mine, treats it as trusted. If your parent agent has write access and your subagents can put arbitrary text in its context, you have an injection path with no attacker required.
Each link below shares sources, entities, or timing with this story.
Claude Code uses Opus / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code uses Opus); both cover ClaudeAI, Opus; reported by the same outlet (reddit.com).
Cursor uses Opus / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Cursor uses Opus); both cover ClaudeAI, Opus; reported by the same outlet (reddit.com).
Linked by a graph relationship (Cursor uses Opus); both cover ClaudeAI, Opus; reported by the same outlet (reddit.com).
Claude Code uses Opus / Shared entity: ClaudeAI / Same source domain / Shared topic
Linked by a graph relationship (Claude Code uses Opus); both cover ClaudeAI; reported by the same outlet (reddit.com).
Opus built by Anthropic / Shared entity: ClaudeAI / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Opus built by Anthropic); both cover ClaudeAI; reported by the same outlet (reddit.com).
Opus built by Anthropic / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Opus built by Anthropic); both cover ClaudeAI, Opus; reported by the same outlet (reddit.com).
Opus built by Anthropic / Shared entity: Opus / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (Opus built by Anthropic); both cover Opus; reported by the same outlet (reddit.com).
Claude Code uses Opus / Shared entity: ClaudeAI / Same source domain / Shared topic
Linked by a graph relationship (Claude Code uses Opus); both cover ClaudeAI; reported by the same outlet (reddit.com).