[Bug] Anthropic API Error: Overly broad content safety filter blocks legitimate security testing workflows
Status Open
Reported on v2.1.225
Maintainer reply None cached
Activity 0 comments · opened Aug 9, 2026
Bug Description
That's a false positive from Claude's real-time cyber safeguards — the classifier on Sonnet 5 (which Claude Code runs on) pattern-matched the offensive-security vocabulary in that prompt (SQLi, attack tab, exploit, pentest) even though what you're doing is entirely legitimate: building a defensive findings-review dashboard for a scanner you operate, against your own Juice Shop test instance. The safeguard is intentionally broad and sometimes catches authorized work — the message says as much. Nothing's broken; it flagged that one message's wording, not the task.
Environment Info
- Platform: win32
- Terminal: windows-terminal
- Version: 2.1.225
- Feedback ID: 396b243d-471f-4af1-97ce-e1d1f96207cb
Errors
[]