Agents2026-09-23 · source-backed

Claude Agent SDK 0.2.158 adds a flag that stops untrusted text triggering file reads.

Issue

2026-09-23

Confidence

source-backed

Sources

Redaction

redacted

Story

The Python SDK release on September 23 adds ClaudeAgentOptions.verbatim_prompts, default False. Set it True and user messages reach the CLI exactly as written, with no @path expansion and no slash-command dispatch. Needs CLI 2.1.248+. Anybody inlining emails, tickets or scraped web content into SDK prompts should turn this on, because without it that content can trigger file reads and commands.

Source trail

The Python SDK release More from github.com

Entities

Anybody Claude Agent SDK ClaudeAgentOptions CLI False Needs CLI SDK September The Python SDK True

Provenance

Canonical issue: Ramsay Research Agent — September 23, 2026
AI generated: no
Story unit: 2026-09-23-claude-agent-sdk-0-2-158-adds-a-flag-that-stops-untrusted-text-triggering-file-reads
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

Claude Agent SDK 0.2.158 adds a flag that stops untrusted text triggering file reads.

Story

Related stories

Rust rewrite ports Claude Code's terminal UI file by file

Anthropic published the source of Claude Code's built-in plugins, and a second plugin architecture came with it

Anthropic open-sourced a commerce agent blueprint with three runtimes and merchant approval gates.

Lasso Security Publishes Claude Code Attack Research, Then Ships the Open-Source Defense in the Same Repo

10 actionable skills from today's findings:

MCP Ecosystem Crosses 10,000 Servers Under Linux Foundation Governance

Source trail

Entities

Provenance

Claude Agent SDK 0.2.158 adds a flag that stops untrusted text triggering file reads.

Story

Related stories

Rust rewrite ports Claude Code's terminal UI file by file

Anthropic published the source of Claude Code's built-in plugins, and a second plugin architecture came with it

Anthropic open-sourced a commerce agent blueprint with three runtimes and merchant approval gates.

Lasso Security Publishes Claude Code Attack Research, Then Ships the Open-Source Defense in the Same Repo

10 actionable skills from today's findings:

MCP Ecosystem Crosses 10,000 Servers Under Linux Foundation Governance

Source trail

Entities

Provenance

Story

Related stories

Rust rewrite ports Claude Code's terminal UI file by file

Anthropic published the source of Claude Code's built-in plugins, and a second plugin architecture came with it

Anthropic open-sourced a commerce agent blueprint with three runtimes and merchant approval gates.

Lasso Security Publishes Claude Code Attack Research, Then Ships the Open-Source Defense in the Same Repo

10 actionable skills from today's findings:

MCP Ecosystem Crosses 10,000 Servers Under Linux Foundation Governance

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance

Story

Related stories

Rust rewrite ports Claude Code's terminal UI file by file

Anthropic published the source of Claude Code's built-in plugins, and a second plugin architecture came with it

Anthropic open-sourced a commerce agent blueprint with three runtimes and merchant approval gates.

Lasso Security Publishes Claude Code Attack Research, Then Ships the Open-Source Defense in the Same Repo

10 actionable skills from today's findings:

MCP Ecosystem Crosses 10,000 Servers Under Linux Foundation Governance

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance