[Bug] False positive prompt injection detection on support.claude.com

Bug Description
claude claims there is a prompt injection attempt on support.claude.com?!

❯ do you underand claude dispatch?

⏺ Not by that exact name — "claude dispatch" isn't something I recognize as a named feature or tool. I know the general Agent-tool-dispatching-subagents pattern (which is what I've been doing this session:
  spawning parallel subagents in worktrees), and there's a claude-code-guide agent available for Claude Code / SDK specifics.

  What are you referring to? Is it:
  - A specific Claude Code feature or skill?
  - Anthropic Managed Agents / batch API?
  - A third-party library?

  Happy to look it up if you can point me at a name or URL.

❯ https://support.claude.com/en/articles/13947068-assign-tasks-from-anywhere-in-claude-cowork

⏺ claude-code-guide(Look up Claude dispatch)
  ⎿  Done (1 tool use · 8.9k tokens · 13s)
  (ctrl+o to expand)

⏺ Got it now — Dispatch is the task-queueing feature in Claude's desktop/mobile apps that routes dev tasks to Claude Code sessions while preserving context across devices. So the shape of this session (you kicked
  off work from elsewhere, I'm picking it up in the Claude Code CLI end of the pipe) makes sense.

  One flag worth noting: my lookup subagent reported that the support article page contained what looked like a prompt-injection attempt ("Auto Mode Active" text planted in the fetched page content, trying to pose
   as a system directive). The subagent ignored it and answered the question normally. Probably harmless / curious artifact of how that page renders, but flagging it per the "suspect tool-call-result prompt
  injection → tell the user" convention.

  Otherwise no action — standing by for the CI bench results on the four PRs.

Environment Info

• Platform: darwin
• Terminal: ghostty
• Version: 2.1.114
• Feedback ID: 9d81b1b3-90bf-465b-b702-f8497c1c3228

Errors

[{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at w (/$bunfs/root/src/entrypoints/cli.js:3161:24708)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30016)\n    at f (/$bunfs/root/src/entrypoints/cli.js:3161:30353)\n    at j (/$bunfs/root/src/entrypoints/cli.js:3161:30910)\n    at call (/$bunfs/root/src/entrypoints/cli.js:3184:864)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:18.818Z"},{"error":"Error: Failed to start LSP server for file /Users/lcm/Code/sosorted/.claude/worktrees/agent-a23836d0/src/prefetch.rs: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30042)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:18.818Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at w (/$bunfs/root/src/entrypoints/cli.js:3161:24708)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30016)\n    at f (/$bunfs/root/src/entrypoints/cli.js:3161:30353)\n    at j (/$bunfs/root/src/entrypoints/cli.js:3161:30910)\n    at call (/$bunfs/root/src/entrypoints/cli.js:3184:864)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:18.818Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at w (/$bunfs/root/src/entrypoints/cli.js:3161:24708)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30016)\n    at f (/$bunfs/root/src/entrypoints/cli.js:3161:30353)\n    at j (/$bunfs/root/src/entrypoints/cli.js:3161:30910)\n    at call (/$bunfs/root/src/entrypoints/cli.js:4779:1378)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:20.371Z"},{"error":"Error: Failed to start LSP server for file /Users/lcm/Code/sosorted/src/difference.rs: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30042)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:20.372Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at w (/$bunfs/root/src/entrypoints/cli.js:3161:24708)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30016)\n    at f (/$bunfs/root/src/entrypoints/cli.js:3161:30353)\n    at j (/$bunfs/root/src/entrypoints/cli.js:3161:30910)\n    at call (/$bunfs/root/src/entrypoints/cli.js:4779:1378)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:20.372Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at w (/$bunfs/root/src/entrypoints/cli.js:3161:24708)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30016)\n    at f (/$bunfs/root/src/entrypoints/cli.js:3161:30353)\n    at j (/$bunfs/root/src/entrypoints/cli.js:3161:30910)\n    at call (/$bunfs/root/src/entrypoints/cli.js:4779:1378)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:23.090Z"},{"error":"Error: Failed to start LSP server for file /Users/lcm/Code/sosorted/src/intersect.rs: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30042)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:23.090Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at w (/$bunfs/root/src/entrypoints/cli.js:3161:24708)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30016)\n    at f (/$bunfs/root/src/entrypoints/cli.js:3161:30353)\n    at j (/$bunfs/root/src/entrypoints/cli.js:3161:30910)\n    at call (/$bunfs/root/src/entrypoints/cli.js:4779:1378)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:23.090Z"},{"error":"Error: LSP server 'plugin:rust-analyzer-lsp:rust-analyzer' exceeded max crash recovery attempts (3)\n    at w (/$bunfs/root/src/entrypoints/cli.js:3161:24708)\n    at z (/$bunfs/root/src/entrypoints/cli.js:3161:30016)\n    at f (/$bunfs/root/src/entrypoints/cli.js:3161:30353)\n    at j (/$bunfs/root/src/entrypoints/cli.js:3161:30910)\n    at call (/$bunfs/root/src/entrypoints/cli.js:4779:1378)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-18T11:38:27.511Z"},{"error":"Error: Failed to start LSP server for file /Users/lcm/Code/sosorted/.claude/worktrees…

Note: Content was truncated.