Interesting, thanks!

Tangentially, I was experimenting indirect prompt injections in Claude Code (also using the user-agent trick) with Fable-5 [0]. Eventually, it executed untrusted code just by asking "Summarize this repo". Interesting times ahead...

[0] https://veganmosfet.codeberg.page/posts/2026-07-15-quest_rce