Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.196 Home All releases olderv2.1.195 v2.1.197newer
Claude Code v2.1.196

awk Command Security Analysis

Claude's static analysis for Bash commands now includes comprehensive awk program inspection. The following patterns are detected and flagged:

  • system() — executes arbitrary shell commands
  • Command pipes: | "cmd" or | getline — executes arbitrary commands
  • @load / @include / @indirect calls — loads extensions or executes indirectly
  • extension() (legacy gawk) — loads arbitrary native code
  • gawk /inet/ network sockets — can exfiltrate data
  • Unquoted glob characters in awk arguments
  • Arguments with runtime-determined program text (prevents static analysis)
  • --file / --source flags (program from file, cannot be statically analyzed)
Evidence

New awk checker (search for "awk program contains system() which executes arbitrary commands")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.196 →