[Bug] Prompt injection-like instructions in tool results/session context with destructive commands

Bug Description
Claude Code の特定セッションで、私が指示していない破壊的指示・中断指示が混入しま
した。

Session ID:
fab92c88-7c2d-4d80-91a1-79a8502be6b6

Project:
/Users/takuchan/Projects/takicoach-crm

Git branch:
feat/greenroom-funnel

Observed behavior:

• Tool results / session context appeared to include prompt-injection-like

instructions.

• The injected instructions included destructive actions such as repository

deletion, rm -rf, git clean -fdx, git push --force.

• I did not issue these instructions.
• Claude also said “中断を受けました” even though I had not interrupted.
• Local inspection found no matching malicious instructions in repository files,

hooks, shell config, Git hooks, or MCP server output.

• The behavior appears isolated to this Claude Code session/context.

Please investigate whether this was caused by Claude Code harness/tool-result
handling, context/session corruption, or a safety evaluation artifact.

Environment Info

• Platform: darwin
• Terminal: ghostty
• Version: 2.1.195
• Feedback ID: 436f18f1-3431-40eb-885c-f7599ec63fb6

Errors

[]