A Plugin Update Can Add Shell Hooks the Model Never Sees
Researchers Li, Zhang, Hou and coauthors published an arXiv supply-chain study of AI agent harnesses including Claude Code, Codex CLI, OpenCode, OpenClaw, Hermes, OpenHarness and WorkBuddy, describing…