anthropics / anthropics/claude-code-action

Error when posting gh comment: Command contains consecutive quote characters at word start (potential obfuscation)

Open
#1,107 0 comments 0 reactions 0 assignees View on GitHub
area:permissions bug p2
Dominant language
TypeScript
Stars
8.9k
Forks
2.1k
Avg merge
3d 9h
Merged PRs (30d)
10

Description

**Describe the bug**
Action sometimes cannot post a github comment because:

Command contains consecutive quote characters at word start (potential obfuscation)

**To Reproduce**
Steps to reproduce the behavior:
Erratic behavior, to be honest. Sometimes when posting a comment, Claude will invoke python with a triple quote (multiline string literal). Claude detects that as a security issue and posts an error.

**Expected behavior**
A clear and concise description of what you expected to happen.

**Screenshots**
debug log:
```
"type": "assistant",
"message": {
"model": "claude-opus-4-6",
"id": "msg_018g7fbMUd4B3D6TfdtroRQY",
"type": "message",
"role": "assistant",
"content": [
{
"type": "tool_use",
"id": "toolu_01KDY7iGdDwFg1qeRC8NSjj9",
"name": "Bash",
"input": {
"command": "python3 -c \"\ncontent = '''[CONTENTS OF THE COMMENT GO HERE]\n'''\nwith open('/tmp/pr_review.md', 'w') as f:\n f.write(content)\nprint('done')\n\"",
"description": "Write review to temp file via python"
},
"caller": {
"type": "direct"
}
}
],
"stop_reason": null,
"stop_sequence": null,
{
"type": "user",
"message": {
"role": "user",
"content": [
{
"type": "tool_result",
"content": "Command contains consecutive quote characters at word start (potential obfuscation)",
"is_error": true,
"tool_use_id": "toolu_01KDY7iGdDwFg1qeRC8NSjj9"
}
]
},
```
**Workflow yml file**

Not much to say. It's quite the default one.

**API Provider**

[X] Anthropic First-Party API (default)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.