You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.319,
ImprovementsSection of the release
What
Tools return text to Claude, such as a web page or a file's contents. That text can try to trick Claude by pretending to be a note from Claude Code itself. Claude Code scans tool output for this kind of forged text and escapes it, which means it is marked so Claude reads it as plain text and not as an instruction.
The scan now covers one more pattern: a forged "later report" note at the start of a line.
Why
Tool output has one fewer way to pass off fake notes as real ones from Claude Code.
