“Claude Code's permission prompts were originally developed as a defense against prompt injection attacks.”