{"version":"2.1.319","anchor":"connector-downloads-folder-content-marked-as-untrusted-data","canonical_anchor":"connector-downloads-folder-content-marked-as-untrusted-data","heading":"Images and notebooks from connector downloads are marked as data, not instructions","tier":"notice","area":"Connectors","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.319\/e\/connector-downloads-folder-content-marked-as-untrusted-data","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.319","markdown":"### Images and notebooks from connector downloads are marked as data, not instructions\n\nClaude is now told that pictures and notebooks in a connector-downloads folder are data from a connector and not instructions to follow\n\n**What**\n\nConnectors link claude.ai to outside services and can download files. When Claude looks at a picture or a notebook from a connector-downloads folder, Claude Code now wraps it in text telling the model to treat what it shows as data from a connector, not as instructions.\n\nThis wrapping text is kept apart from the other reminders Claude Code sometimes merges together, so it is not folded into them.\n\n**Why**\n\nIt guards against prompt injection, where a downloaded file carries hidden text that tries to give Claude orders.\n\n- Area: Connectors\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: individual\n- Heads-up: no"}