catb0t there's a lot of "function_call" XML tags directly in Claude's response, and they all have a call name, from which you can see that it's trying to run bash commands, etc:
<function_calls>
<invoke name="bash">
<parameter name="command">grep -n "decryptIframes\s*[:=]" wrapper.7bb96a2bddc609d01e71.js</parameter>
</invoke>
</function_calls>
This doesn't happen on official Claude API, so it's probably related to Kagi Assistant's system prompts or something else