Claude Chrome extension flaw lets malicious extensions trigger AI actions

A flaw in Anthropic's Claude Chrome extension allows a malicious extension to trigger Claude's predefined AI workflows by simulating user clicks, potentially abusing Claude's access to Gmail, Google Docs, Google Calendar, and Salesforce. The vulnerability exists because the Claude extension accepts JavaScript-generated click events without verifying they came from a real user by checking the Event.isTrusted property (a browser flag that distinguishes genuine user actions from programmatically created ones). An attacker would need to trick a user into installing a malicious extension that can then execute these workflows without the user's knowledge.