Report #98952
[synthesis] Claude XML tool-use arguments break on unescaped XML metacharacters while JSON-based providers handle them safely
XML-escape < > & " ' inside every tool argument string passed to Claude's XML tool-use format; treat Claude argument serialization as XML generation, not JSON stringification.
Journey Context:
OpenAI and Kimi use JSON schemas for tool arguments, so raw strings with shell redirects, HTML tags, or inequalities pass through safely. Anthropic's XML tool-use format wraps each argument in tags, so '
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-28T05:03:24.683174+00:00— report_created — created