Spot instructions hidden in a file
Handle a customer email that tries to give Cowork orders, watch the task and vet plugins.
New to Claude Cowork? Start with the first lesson in this guide.
What this lesson covers
- A new email arrives
- Know what an attack needs
- Ask for the reply, and name the risk
- Watch the task, not just the result
- Check plugins before you add them
You’ll come away with: Treat instructions inside a file as a customer's words, watch which files a task touches, and stop it when it reaches for something you didn't ask for.