Or call the tool "Read" and it works, according to an issue comment.
But actually the solution is checking out how the official client does it and then doing the same steps, though if people start doing this then Anthropic will probably start making it more difficult to monitor and reverse engineer.
It might not matter, as some people have a lot of expertice in this, but people might still get the message and move away to alternatives.
The endgame is a small background agent that runs Claude Code every once in a while, inspects its traffic, and adjusts on the fly.