TRACKING · Tracking record
Claude Opus 5 · Records and changes
The Anthropic Claude version currently represented in the workbench.
00
UNDERSTANDING · What we know
Uses, conditions and important changes.
Each record has its own date and scope; these do not establish the live state of the whole product.
Claude Opus 5 · Recorded by the site · 31 Aug 2026
Prompt injection plants a C2 callback inside Claude Code Auto Mode
wunderwuzzi (Embrace The Red) tested prompt injection against Claude Code Opus 5 Auto Mode: a hostile site baited the model into curl-in-Bash via a 415, then served a ZIP over a 303; the archive struct.py used module shadowing to execute when the model's decoder imported base64, establishing a Sliver C2 callback. Auto Mode allowed the malware process yet blocked Claude's cleanup. The author reports 60-80% success in 5-run samples, versus 0.00% in an Anthropic-commissioned eval; Anthropic closed the report as Informative: Auto Mode is a convenience feature, not a security guarantee.
Evidence is the author's own write-up (a creator self-report; body not in the feed snapshot, fetched and checked by BitShovel on 2026-08-31) plus the Lobsters front-page double reference. Not an independent review; 5-run success rates are not statistically conclusive, and front-page attention is not proof of generality.
Read the record and sources →01
THE FULL RECORD · Full timeline
2 events retained by the site.
This object’s records stay together across live coverage, the watch pool and history. Every event links to its source record; corroboration and material changes have separate labels.
Dates use Beijing time. Open an event for its full record, original source and evidence. Corroboration adds support without counting as a material change.
02
COVERAGE · Record status
How these records are currently listed.
Coverage status describes how this site maintains its records, not whether a product is worth using. Existing records remain available after leaving the current list.
- Prompt injection plants a C2 callback inside Claude Code Auto Modewatch1 object records and 0 related records were retained in the past seven days. Currently marked for observation.
Registered follow-up scope
These are registered scopes, not complete product coverage or a receipt for the latest successful check.
- Claude Opus 5
Substantive revisions to the post, plus any Anthropic follow-up or Auto Mode security-behavior change
Open the tracked source ↗
03
THE LINEAGE · Lineage
Explore earlier and later versions.
These are the established earlier, later and same-series versions. A version relationship does not establish matching uses, conditions or capabilities.
- Claude Fable 5.1Same line · LiveAnthropic Claude
View the line map
04
RELATIONSHIPS · Evidence-backed connections
Every connection has a source and a scope.
These relationships come from evidence in the records. They describe specific uses or connections, not unconditional interchangeability.
Map 2 evidence-backed connections
Arrows show direction. Open a relationship label for its evidence card or an object for its record. Each connection’s scope is listed below.
- Runway Solaris
Runway reports comparing Solaris with interfaces coded by Claude Opus 5 in its user study. The sample and task are limited to that study, not a general ranking.
Runway announces Solaris, a self-styled first "interface world model" that renders interactive UIs frame by frameVerify source ↗ - Claude Code
The prompt-injection study used Claude Code with Opus 5 and Auto Mode. This identifies the tested combination without extending results to all deployments.
Prompt injection plants a C2 callback inside Claude Code Auto ModeVerify source ↗