The dot claude Attack Surface
A security researcher warns that Anthropic's Claude Code tool has a dangerous attack surface where malicious code can be hidden in a project's .claude directory. When users trust a cloned repository, all hooks and skill …