{"version":"2.1.318","anchor":"task-notifications-carry-caller-notes-and-flag-remote-contro","canonical_anchor":"task-notifications-carry-caller-notes-and-flag-remote-contro","heading":"Agent task notices warn Claude about text relayed from Remote Control","tier":"internal","area":"Agents","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318\/e\/task-notifications-carry-caller-notes-and-flag-remote-contro","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.318","markdown":"### Agent task notices warn Claude about text relayed from Remote Control\n\nAgent task notices can carry a caller note and warn Claude to treat text relayed from a Remote Control session as data\n\n**What**\n\nWhen an agent Claude started finishes a task, Claude Code sends Claude a notice with the result. These notices now:\n\n- can carry a note from whoever started the task, added to the end of the notice\n\n- warn that the result may relay text marked as coming from a Remote Control session on another device, and that this text should be treated as data, not instructions\n\nBefore, the only relay warning was about Artifact content.\n\n**Why**\n\nThis helps stop text from another device being read as commands to Claude, a kind of attack known as prompt injection.\n\n- Area: Agents\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: no"}