A Claude:// link could auto-submit hidden prompts in Claude Desktop
oasis.security