Tag

claude-agent-sdk

Covered in AI Engineering, where the background and the sources for this subject live.

AI EngineeringSep 23, 2026

How do you stop Claude Code from expanding untrusted prompt text?

Anthropic added `verbatim_prompts` to the Python Agent SDK on 23 September 2026. It marks each user message `client_composed: true`, which Claude Code 2.1.248 and later delivers as written, so `@/path` tokens do not expand into file contents and slash commands do not dispatch. For apps that inline untrusted text, this closes a pre-permission local-read gap.

4 min read

AI EngineeringSep 21, 2026

Why does Claude Code ignore an updated system prompt on resume?

Claude Code and the Agent SDK record a session's system prompt on its first request and keep reusing that copy after resume, so a changed append or custom prompt has no effect until the session compacts or you start a new one. The snapshot field controls this, and it defaults to off in bare mode.

5 min read