Discussion: Claude Code with --dangerously-skip-permissions is a real attack surface. Lasso published research +

Saw an interesting discussion on r/ClaudeAI about this — wanted to bring it here. **Original topic:** Claude Code with --dangerously-skip-permissions is a real attack surface. Lasso published research + an open-source defender worth knowing about. > If you use Claude Code with `--dangerously-skip-permissions`, this is worth 10 minutes of your time. Lasso Security published research on indirect prompt injection in Claude Code. The short version: when Claude reads files, fetches pages, or gets output from MCP servers, it can't reliably tell the ... What are your thoughts? Has anyone here dealt with MCP server? --- *Discuss more at [0n MCP](https://www.0nmcp.com) — the hub for [model context protocol](https://www.0nmcp.com).*