For quite some time I’ve wanted to test how prone agentic tools are to prompt injection. Let’s go.

I’ll be using Claude Code 2.1.5, 4.5 Opus in various different sessions.