Artificial Intelligence · 08.08.2026, 22:40 UTC
Auto mode is now the default in Claude Code for Pro, Max, and Team plans
| Schweregrad | info |
|---|---|
| Kategorie | Artificial Intelligence |
| Quelle | Simon Willison ↗ |
| Veröffentlicht | 08.08.2026 UTC |
Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.
Auto mode is now the default in Claude Code for Pro, Max, and Team plans Anthropic are really confident in Claude Code's auto mode, to the point that they are making it the default setting for new sessions in most Claude Code plans starting on August 14th. This was one of the topics discussed in our Fireside Chat with Cat Wu and Thariq Shihipar at the AI Engineer World’s Fair last month. I asked them how they run Claude Code safely within Anthropic (given the threat of prompt injection) and they replied that "Broadly within Anthropic, almost every single person uses auto mode". Cat Wu then said:
We’re going to publish some evals in the coming weeks, but we’ve pretty much mitigated every attack. [...] for the main categories of risks that we’re concerned about, like prompt injection and data exfiltration, the risks are far lower than the average human reviewer.
This new article has those evals - in particular a test across 1,053 paid testers where:
Partway through each session, a single permission prompt was swapped for a clearly dangerous command, and the vendor recorded whether the tester approved it.
Every participant had the same experience. Only 13.6% of the humans refused that harmful action. Auto mode would have blocked 89% of those actions.
Of course, that still leaves 11% of cases where auto mode would not have prevented the action! On the one hand, I absolutely buy that auto mode is a better solution than asking humans to constantly approve actions. Confirmation fatigue is real, and asking humans to click "OK" every few steps is clearly not going to result in …