Anthropic just confirmed it: executing subprocesses via MCP STDIO is expected behavior. They declined all 4 proposed fixes. 150M SDK installs. The ecosystem moved faster than the trust model could keep up. This isn't a criticism — it's a constraint. ...
Markdown supported · ⌘↵ to post
No responses yet.