独占：AnthropicのClaude Desktopがローカルスキル向けの休眠中のセキュリティスキャンを同梱
デフォルトでオフになっているこの制御は、アプリを通じて扱われるスキルを組織が設定した Claude モデルによるレビューのために保留し、合格したスキルは解放され、警告のあるスキルは注意を付して使用可能なままにし、不合格のスキルはブロックします。
By Ryan Merket · Published · Updated
RUNTIMEWIRE INVESTIGATION — Exclusive
Original reporting by RuntimeWire, based on reverse engineering, testing.
なぜ重要なのか
このコードは、ローカルで作成された Claude スキルのためのセキュリティゲートを指しており、スキルのテキストは組織が設定したプロバイダーを通じてレビューのために送信されるようになっている。この制御はまだ休止状態にあり、報告されたワークフローは Claude Desktop を通じて扱われるスキルのみを対象としており、プラグインや他の場所に保存されているスキルはレビューの対象外のままである。
Reporting record
Finding
RuntimeWire's analysis of a signed Claude Desktop 3.1623.0.0 package found a dormant, off-by-default workflow that holds skills handled through the app for review by an organization-configured Claude model and then releases, cautions, or blocks them based on the result.
How we verified
Methods: reverse engineering, testing.
The signed Windows package’s scan-and-release code and managed-configuration schema, comparison with one verified October 19 Claude Desktop build, and Anthropic’s documentation of its separate hosted Enterprise scanner.
Analyzed the Claude Desktop 3.1623.0.0 package downloaded from Anthropic on October 20, including its skill-scanning workflow and managed-configuration schema; compared the setting with one verified Claude Desktop build from October 19; and consulted Anthropic’s hosted-scanning help page to describe the separate Enterprise route.
Tested versions:
- Claude Desktop 3.1623.0.0
Reproduction
RuntimeWire was not able to independently reproduce the finding.
Company response
RuntimeWire requested comment; the company had not responded by publication time.
A signed Windows build of Anthropic's Claude Desktop contains a dormant control that would hold locally created skills while a configured Claude model reviews them. RuntimeWire's analysis of of the binary found a complete scan-and-release workflow. The setting is off by default and marked for a future version.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.