Claude Chrome extension flaw lets malicious extensions trigger AI actions