How to use Claude to investigate approval flaws
An autonomous Claude harness found command-approval flaws in Claude Code. The researcher reproduced and disclosed patched CVEs; harness details stayed private.
AddedAnthropic’s Claude includes a chat assistant, Claude Code, a command-line coding agent, and Cowork for delegated desktop work with files and tools.
Maker: Anthropic
Writing, research, coding and desktop work.
An autonomous Claude harness found command-approval flaws in Claude Code. The researcher reproduced and disclosed patched CVEs; harness details stayed private.
AddedMahmoud Halat used Claude Code to analyze his own bank and credit-card exports without connecting a finance aggregator to his accounts. The agent read the files, wrote a Python pipeline and generated a self-contained interactive HTML dashboard.
AddedClaude Code helped trace persistent WordPress malware and revise fleet integrity checks. Human review expanded file audits to database and frontend injection.
AddedClaude Code designed an OpenSCAD snap enclosure from drawings and fit photographs; seven revisions corrected vents, solder clearances and board retention.
AddedMartin used Claude Code as a continuing guide during a family trip to Taiwan. The agent ran on a second Mac left in Japan, while Discord on his phone provided access to the same repository of travel plans abroad.
AddedChris Henry wanted to track planned travel without retyping years of flight records. He already used Flighty and could export flights from 2023 onward as CSV, so he made that file format the starting point for a custom stay counter built with Claude Code.
AddedZach Smith's family calendar held school events, practices and birthdays, but importing a new school year remained an annual manual chore. The school's PDF used small month grids and a color key. Smith normally interpreted each colored square, named the event, chose single or multi-day blocks and decided whether a specific time belonged.
AddedThe author of AIおためし帳 tested Claude Code on a real day trip to a park with a child. The task started in a newly created empty folder: make a packing list and save it as a named Markdown file, so it could be reopened or printed later.
AddedClaude helped turn MiniLab pads into OBS scene controls, using real MIDI feedback to fix velocity bindings, LED addresses, and silent WebSocket callbacks.
Addedkiki's company wanted the children to open a family travel guide willingly, rather than ignore a paper itinerary. Claude Code turned a Nagano trip covering Hakuba, Matsumoto and Kamikochi into a playful landing page built around the family's dates and planned stops.
AddedEmily Gransky and her partner photographed plants they liked during a nursery visit, ending with eighty-five images and no garden plan. Her linked article's accessible introduction explains that the choices had already been narrowed by shade needs and what they wanted the plants to attract or repel.
AddedClaude Code mapped a smart car's shift-register motor controls with human wheel observations. Failed GPIO tests preceded working Wi-Fi driving from a phone.
AddedA student preparing to move to Dallas for a first job built NestMap with Claude Code. The aim was to see apartments alongside the everyday surroundings that matter after a move: the office, grocery stores, restaurants and bars.
AddedZahid Khan wanted to locate land inherited through his family in Mohammadpur, Uttar Pradesh. He had visited the village only a few times and could not readily identify the parcels. Digitized records were spread across government websites and written in dense official Hindi.
AddedFelix worked with a colleague using Claude Opus to build a retail data workflow through a self-hosted n8n instance.
AddedTsuyoshi Yamasaki's relatives had more than 30 scattered plots, outdated ownership records and unused buildings. He knew about Japan's inherited-land return system but did not know how to organize the preparation. Claude Code received the family's incomplete description and researched official ministry pages and legal text before building a plan.
AddedClaude Code worked on CTF tasks in a prepared VM. The participant monitored terminals and steered attempts; competition feedback supplied clear results.
AddedRemco Livain wanted a quarter's accounting records to arrive at his accountant without another hunt for missing receipts. His setup had been developed over months using Claude Code and Cowork. It accepted scanned letters, PDF documents, email receipts and photographs, classified them, and maintained a receipt register against bank and card transactions.
AddedAndrii Shramko documented a real Allegro purchase of fifteen drywall toggle anchors for a TV mounting project. The agent read his existing notes, compared fifty three offers on September 4 and completed the purchase on September 5, 2026.
AddedClaude Code used camera feedback to place three blocks in a taped target after calibration stalled; Rob Bercik supplied hardware changes and inspection.
AddedPatrick Frey had accumulated 25 years of documents on a Synology NAS. The storage system worked, but its folder structure made documents difficult to find. He used Claude Code to analyze the organization and suggest a clearer structure while placing a specific limit on what the agent could read.
AddedClaude Code and Codex played native macOS chess through accessibility labels and MCP. A deterministic referee rejected illegal moves before real UI actions.
AddedClaude Code helped port an Unreal game to iPhone. Device tests exposed video, build, input and material problems; TestFlight distribution remained unfinished.
AddedErik Craddock built a local accounting routine around a ScanSnap iX1300 and Claude Code. Physical paperwork from the family inbox was scanned into PDFs, while email documents could be printed to PDF into the same inbox. A custom slash command then processed receipts, invoices and checks into organized files and Ledger accounting entries.
Added