Edition 1.4: 37 tools, 4 platforms, 13 corrections, 2 contributors

9 new tool cards (29–37): iOS Reminders CRUD suite (5 tools),
visualize:show_widget, gmail_create_draft, anthropic_api_in_artifacts,
persistent_storage. 13 v1.3 corrections including user_time/location
reclassified as always-loaded, memory_user_edits 500-char limit,
chart_display_v0 intermittent (not deterministic), window.storage
session-scoped. New sections: MCP connector state, artifact execution
layer, Project context behavior. iOS split from Android as distinct
platform. Contributors: anonymous security researcher, DMontgomery40.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
frmoretto
2026-03-17 19:29:02 +01:00
co-authored by Claude Opus 4.6
parent c93c692458
commit a7197e5534
8 changed files with 1063 additions and 153 deletions
+4 -2
View File
@@ -13,6 +13,7 @@ If you discover a tool behavior that could be exploited to:
- Exfiltrate sensitive information via tool parameters or responses
- Manipulate tool behavior through prompt injection in tool inputs
- Escalate permissions beyond intended scope
- Abuse the artifact execution layer (`anthropic_api_in_artifacts`, `persistent_storage`, MCP endpoints) for unintended access
**Please report it responsibly:**
@@ -42,5 +43,6 @@ If you discover a tool behavior that could be exploited to:
| Version | Supported |
|---------|-----------|
| 1.3 | Yes |
| < 1.3 | No — please reference the latest edition |
| 1.4 | Yes |
| 1.3 | No — please reference the latest edition |
| < 1.3 | No |